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The  CIO  Juggling  Act 

As  CIOs  take  on  more  roles,  Web  2.0  can  help 

Nearly  half  of  CIOs  today  hold  two  or  more 
executive  roles.  It’s  a  testament  to  their  busi¬ 
ness  value:  Good  CIOs  are  well  positioned  to 
think  strategically  about  their  organization’s 
activities  and  processes,  and  to  drive  new 
value.  But  there  are  downsides,  too.  Our  cover 
story,  “CIO++,”  by  Senior  Editor  Stephanie 
Overby,  on  Page  26,  explores  what  this  trend 
means  for  CIOs  and  IT. 

One  way  busy  executives  increase  their 
effectiveness  is  by  networking  intelligently  with  like-minded  peers  in  their 
professional  circle.  Now,  CIO  and  Linkedln  have  partnered  to  enhance  your 
ability  to  network  through  our  site  and  theirs.  We’ve  started  a  CIO  group  on 
Linkedln;  it’s  growing  fast,  with  over  1,000  members  today.  And  Linkedln  is 
serving  CIO  content  to  all  its  IT  professional  members. 

We’re  also  bringing  some  of  Linkedln  to  CIO.com.  To  see  who  in  your  net¬ 
work  works  at  companies  covered  in  our  articles— or  at  companies  hiring  in 
our  CIO  Wanted  career  listings— click  on  the  blue  “in”  logo  you’ll  find  across 
CIO.com.  You  can  also  see  which  connections  are  attending  CIO  conferences, 
and  use  your  Linkedln  profile  to  automatically  fill  in  conference  registration 
forms.  Check  it  out,  and  tell  me  what  you  think. 

Why  are  we  doing  this?  Changes  in  publishing  and  social  networking  mean 
we  need  to  extend  our  relationships  and  get  our  content  into  the  places  our 
readers  spend  their  time.  We’ve  started  a  CIO  group  in  Facebook,  and  we  have 
a  CIOMagazine  feed  in  Twitter.  Every  day,  we  promote  our  content  to  social 
media  sites  around  the  Web. 

CIOs  are  catching  the  Web  2.0  bug,  too.  In  “Wiki  While  You  Work,”  on  Page  36, 
we  explore  how  to  successfully  deploy  a  wiki  and  the  latest  technology  options. 
Many  CIOs  are  also  using  internal  blogs  to  foster  collaboration,  and  some  publish 
public  blogs.  There  are  even  a  few  on  Twitter— I  know  of  at  least  eight. 

Do  Web  2.0  technologies  help  you  get  more  done?  How  can  we  help  you  to  be 
more  productive?  E-mail  me  at  lundberg@cio.com— or  DM  me  in  Twitter! 


Abbie  Lundberg,  Editor  in  Chief 
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The  Next  Big  Trend 

There's  more  than  buzz  to  unified  communications 

Try  as  you  may  to  control  your  calendar, 

more  often  than  not,  it  controls  you.  But  I  must 
thank  the  calendar  gods  for  syncing  my  recent 
speaking  schedule  to  focus  on  one  topic:  unified 
communications. 

Prior  to  my  presentation  blitz,  I  had  bucketed 
the  term  “unified  communications”  in  the  cat¬ 
egory  of  vendor  marketing  speak.  I  didn’t  think 
it  referred  to  an  identifiable,  open  and  competi¬ 
tive  market. 

However,  as  I  often  say,  these  days  publishers  know  less  and  less  about  more 
and  more.  Recent  conversations  with  several  of  the  world’s  leading  CIOs  have 
convinced  me  that  the  unified  communications  market  is,  indeed,  very  real.  And 
very  broad. 

Market  researcher  IDC  (a  sister  company  to  CIO’s  publisher)  defines  unified 
communications  as  “a  software  solution  platform  that  adds  IP  telephony  calling 
and  management,  Web,  audio-  and  videoconferencing,  instant  messaging,  and 
pervasive  presence  management  and  awareness— all  accessible  through  desktop 
and  mobile  devices.”  And  it  is  a  market  that  is  growing  rapidly  IDC  expects  the 
worldwide  market  for  unified  communications  technology  to  nearly  double  in 
value  between  now  and  2011. 

There  are,  however,  some  bumps  on  the  road  to  widespread  deployment.  Most 
notably,  there’s  a  wide  array  of  products  that  CIOs  must  understand  in  order  to  cre¬ 
ate  the  best  unified  communications  implementation  for  their  companies.  CIOs  can 
find  the  business  value  of  unified  communications  elusive  if  they  take  a  piecemeal 
approach,  says  IDC. 

My  advice,  based  on  my  conversations  with  leading  global  practitioners:  The 
boldest  moves  to  unified  communications  are  the  surest.  As  you  start  to  roll  up 
your  strategic  plans  for  2009,  make  a  bold,  comprehensive  unified  communica¬ 
tions  buy  a  centerpiece  of  that  strategy. 

With  IDC  stating,  “The  impact  of  unified  communications  will  define  the  next 
decade  of  the  communications  and  IT  industry,”  you  have  all  the  high  air  cover 
you  need  for  your  bold  plan. 
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In  a  consolidated  IT  world,  you  need  servers  that  run 
on  legs  of  steel.  So  we  gave  Windows  Server"  2008 
innovations,  such  as  Failover  Clustering  and  a  Server 
Core  installation  option,  that  help  isolate,  resolve,  and 
evade  problems  to  deliver  superhuman  reliability. 

Meet  the  new  Windows  Server  2008 

at  serverunleashed.com 
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GoogleGearslIp 

Privacy  Push 

search  Google  is  working  with  other  companies  to  push 
consumer  privacy  legislation  in  the  U.S.  Congress  and  will 
work  with  the  Federal  Trade  Commission  to  fine-tune  online 
advertising  principles  that  the  agency  proposed  in  December, 
say  the  company’s  top  privacy  executives. 

Google  is  also  reaching  out  to  privacy  advocates  in  an  effort 
to  allay  concerns  about  its  acquisition  of  online  advertising 
vendor  Doubleclick,  company  officials  say. 

Google  has  focused  on  three  key  principles:  transparency  of 
privacy  policies,  security  of  data  and  user  choice,  and  control 
over  data  use,  says  Nicole  Wong,  Google’s  deputy  general  coun¬ 
sel.  “People  don’t  like  binary  choices  about  how  to  use  data. 
They  want  to  be  [online]  on  their  own  terms.” 

In  March,  Google  hosted  a  meeting  of  the  Consumer  Privacy 
Legislative  Forum,  a  group  of  companies  Continued  on  Page  12 
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Diagnosis:  EMR  Implementation  Lags 


health  care  While  elec¬ 
tronic  medical  records  (EMRs) 
have  gained  ground  in  recent  years 
with  physicians  and  patients, 
implementation  of  these  systems 
still  lags,  according  to  a  survey 
of  the  members  of  the  College  of 
Healthcare  Information  Manage¬ 
ment  Executives  (CHIME).  More 
than  120  CIOs  took  part.  The  survey 
found  that  although  80  percent  of 
respondents  said  their  organization 
strongly  encouraged  or  mandated 
electronic  physician  documentation 
for  inpatient  care,  only  18  percent 
had  implemented  the  technology.  Of 
those  who  did,  55  percent  reported 


that  less  than  half  of  their  inpatient 
physician  documentations  were 
completed  electronically. 

Forty-two  percent  of  respondents 
said  their  preferred  documenta¬ 
tion  process  was  a  set  of  structured 
inputs— -a  paper  list  of  symptoms,  for 
example— using  forms  in  templates. 
Other  processes  included  the  use 
of  structured  technology  and  tran¬ 
scribed  dictation  (29  percent)  and 
mainly  free  text  entered  by  the  physi¬ 
cian  (17  percent),  along  with  "other 
methods,"  including  templates  with 
voice  recognition,  structured  input 
using  forms  with  dictation  and  a  mix 
of  free  and  structured  text. 


Fixed  workstations  with  laptops 
and  computers  on  wheels  were  the 
main  tools  used  to  capture  patient 
information.  Exactly  half  of  the 
respondents  who  use  technology 
to  capture  this  data  employ  voice 
recognition  software;  8  percent  used 
handwriting  recognition  software. 

CHIME  members  also  offered 
suggestions  for  a  successful  EMR 
implementation.  These  included 
keeping  physicians  involved  in  the 
development  of  the  tools,  the  need 
to  phase  in  an  implementation  ver¬ 
sus  just  flippinga  switch  and  ample 
training  time  for  users. 

-Jarina  D'Auria 
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TRENDLINES 


he  Litter  on  the 

nternet 


internet  Between  1  percent  and  3  percent  of  all  traffic  on 
the  Internet  is  meaningless  packets  of  information,  used  in  dis¬ 
tributed  denial  of  service  attacks  (DDoS)  to  knock  websites  offline. 
This  is  the  finding  of  Arbor  Networks,  a  network  traffic  analysis 
company  that  recently  looked  at  traffic  flowing  between  more  than 
68  Internet  service  providers  to  see  how  much  of  it  was  malicious. 
“The  thing  that’s  surprising  is  it's  consistently  1  to  3  percent," 
says  Danny  McPherson,  Arbor's  chief  research  officer.  “It’s  pretty 
significant." 

To  purchase  the  bandwidth  that  Arbor  tracked  in  these  DDoS 
attacks,  a  legitimate  user  would  have  to  pay  hundreds  of  thou¬ 
sands  of  dollars  per  month,  McPherson  says.  That’s  not  a  problem 
for  criminals,  however,  who  use  the  network  connections  of  their 
victims  to  attack  others. 

DDoS  attacks  are  attempts  to  overwhelm  the  victim’s  servers 
with  routine  Internet  messages.  Attackers  send  so  many  packets 
that  the  victim’s  computers  are  unable  to  do  their  regular  job  . 

This  has  become  a  common  occurrence  in  recent  years. 

Studying  the  data  from  about  1,300  routers  over  18  months, 
Arbor  found  that  the  tidal  waves  of  SYN  or  ICMP  (Internet  Control 
Message  Protocol)  packets  used  in  DDoS  attacks  rarely  dropped 
below  1  percent  of  all  traffic  and  could  easily  rise  to  6  percent 
during  peak  periods.  Attacks  drop  off  during  Christmas  and  New 
Year’s,  perhaps  while  the  attackers  are  “hung  over  or  expending 
their  spoils,”  McPherson  wrote  in  a  blog  posting. 

With  spam  now  making  up  almost  all  e-mail  traffic,  there’s 
a  considerable  amount  of  junk  clogging  the  Internet’s  pipes. 
McPherson  estimated  that  as  much  as  10  percent  of  the  Internet’s 
traffic  could  be  "raw  sewage.”  -Robert  McMillan 


Thinking GREEN  About  Hardware? 


energy  Although  55  percent  of  IT  executives  say  their 
organizations  have  green  initiatives,  they  still  lag  in  buying  energy- 
efficient  hardware  or  products  that  are  produced  sustainably. 


Continued  from  Page  11 


focused  on  getting  a  consumer  privacy 
bill  passed  by  Congress.  The  group 
doesn’t  expect  legislation  to  pass  this 
year  but  is  working  toward  consensus 
on  privacy  issues. 

Google  also  plans  to  file  formal 
comments  about  the  FTC’s  proposed 
privacy  principles  for  online  behav¬ 
ioral  advertising,  says  Peter  Fleischer, 
Google’s  global  privacy  counsel. 
Google  supports  the  FTC,  Fleischer 
says,  but  it  will  raise  some  questions. 

For  example,  the  FTC  has  asked 
for  comments  on  what  constitutes 
“sensitive  data”  and  whether  it  should 
prohibit  its  use.  An  anonymous  search 
on  Google  for  healthcare  providers  that 
treat  AIDS  may  be  sensitive,  but  it’s  not 
personally  identifiable,  says  Fleischer. 
In  most  cases,  IP  (Internet  Protocol) 
addresses  are  not  personally  identifi¬ 
able-websites  cannot  connect  IP 
addresses  to  individuals  in  most  cases. 

The  debate  over  personally  iden¬ 
tifiable  information  is  the  “hardest 
question”  in  privacy,  Fleischer  says. 
“There’s  a  gray  area,  and  that’s  what 
we’re  struggling  with,”  he  says.  Asked 
if  Google’s  Doubleclick  acquisition 
threatens  people’s  privacy,  he  says  one 
issue  was  lost  in  the  debate:  Double- 
Click  doesn’t  collect  personally  identi¬ 
fiable  information  when  it  serves  ads. 

Privacy  groups  unsuccessfully 
pushed  the  FTC  to  reject  the  Double- 
Click  deal,  saying  the  combined  com¬ 
pany  would  hold  massive  amounts  of 
personal  data.  Privacy  advocate  Jeff 
Chester,  executive  director  of  Cen¬ 
ter  for  Digital  Democracy,  met  with 
Google  in  March.  Fie  praised  Google 
for  having  “thoughtful”  employees 
willing  to  discuss  the  issues  but  said 
it  doesn’t  seem  to  understand  the 
privacy  concerns  that  are  part  of  the 
Doubleclick  deal. 

-Grant  Gross 


12  MAY  1,  2008  |  www.cio.com 


PHOTO  BY  HANS-JOACHIM  ROY 


Fujitsu  PRIMEQUEST®  servers  offer  a  cool  and  compact  footprint  in  the  datacenter. 
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Powerful  servers  don't  have  to  be  large  and  hot.  Take  the  Fujitsu  PRIMEQUEST®  family  of  servers:  the  top  of 
the  line  PRIMEQUEST®  580  server  offers  32  Dual-Core  Intel®  Itanium®  processors  hosting  2  TB  of  main 
memory,  all  in  a  compact  chassis  that  consumes  little  more  than  two  floor  tiles  of  space.  What’s  more,  it  runs 
up  to  40  percent  cooler  than  comparable  servers  due  to  its  advanced  airflow  and  power  management.  Need 
something  cool  in  a  smaller  size?  The  PRIMERGY®  TX120  Tower  Server  features  an  Intel®  Xeon®  processor  in  a 
whisper-quiet  chassis  less  than  half  the  size  of  standard  servers.  Now  that’s  cool.  For  more  information,  go  to 
http://us.fujitsu.com/computers/GreenlT. 


Minimize  your  carbon  footprint  with  energy  efficient 
Fujitsu  PRIMEQUEST ®  and  PRIMERGY®servers  powered  by  Intel® processors. 


BX620S4  1X120  1X300  S3  RX300S3 

Blade  Servers  Tower  Server  Tower  Server  Rack  Server 


PRIMERGY ®  Xeon’-based  Servers 


PRIMEQUEST  PRIMEQUEST 

520  540/580 

PRIMEQUEST 8  !tanium®-based  Servers 
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THE  POSSIBILITIES  ARE  INFINITE 


©2008  Fujitsu  Computer  Systems  Corporation.  All  rights  reserved  Fujitsu,  the  Fujitsu  logo,  and  PRIMEQUEST  are  registered  trademarks  of  Fujitsu  Limited 
in  the  United  States  and  other  countries.  PRIMERGY  is  a  registered  trademark  of  Fujitsu- Siemens  Computers  GmbH.  Celeron.  Celeron  Inside,  Centrino, 
Centrino  Inside,  Centrino  Logo.  Core  Inside.  Intel,  Intel  Logo.  Intel  Core,  Intel  Inside,  Intel  Inside  Logo,  Intel  Viiv,  Intel  vPro,  Itanium,  Itanium  Inside,  Pentium, 
Pentium  Inside,  Viiv  Inside,  vPro  Inside.  Xeon,  and  Xeon  Inside  are  trademarks  of  Intel  Corporation  in  the  U.S.  and  other  countries 
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galifefa  Virtualization  Security  Hole 
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DATA  CENTER 

There’s  no  shortage  of 
startup  companies  hawking  vir¬ 
tualization  management  and  security  tools,  but  a  new 
entrant,  Altor  Networks,  has  an  interesting  angle  for 
IT  leaders  worried  about  virtualization  security.  Its 
debut  product,  the  Virtual  Network  Security  Analyzer, 
gives  visibility  into  the  data  traffic  between  virtual 
machines— a  security  blind  spot  for  people  managing 
virtualized  servers. 

VMware  and  others  have  addressed  myriad  manage¬ 
ment  and  security  features,  but  none  offer  visibility  into  or 
analysis  of  the  traffic  between  multiple  VMs.  So  while  IT 
managers  are  able  to  get  a  look  inside  individual  VMs,  they 
have  been  blind  to  what  one  VM  on  one  physical  machine 
is  trying  to  say  to  a  VM  on  another  physical  machine.  This 
presents  real  malware  and  compliance  risks. 

Altor  has  a  unique  offering,  says  Mike  Montecillo,  a 
security  and  risk  management  analyst  with  Enterprise 


Management  Associates.  “Gaining  visibility  into  virtual 
networks  has  been  difficult  due  to  the  fact  that  in  most 
cases  organizations  are  deploying  physical  appliances 
to  monitor  network  traffic,”  he  says.  Those  appliances, 
designed  to  watch  for  risks  on  a  physical  network,  don’t 
work  with  VMs.  Nor  can  today’s  firewall  products  see 
into  virtual  machine  traffic. 

Altor’s  Virtual  Network  Security  Analyzer  will  be 
sold  as  software  inside  a  virtual  appliance.  “Our  goal  is 
to  make  the  virtual  network  more  secure  than  the  physi¬ 
cal,”  says  Altor  CEO  Amir  Ben-Efraim.  The  software 
works  with  VMware  ESX  Server  and  will  eventually 
support  other  major  players,  including  Citrix  Xen- 
Server  and  Microsoft.  It  will  centrally  collect  data  on  all 
packets  traveling  between  VMs  and  uncover  risks  such 
as  port  scans  and  unusual  protocols.  It  also  will  create 
what  Ben-Efraim  calls  a  “baseline  on  your  data  center 
behavior,”  then  analyze  traffic  going  forward,  looking 
for  unusual  patterns.  - Laurianne  McLaughlin 


For  Some  CIOs,  Small  Is  Beautiful 


ON  THE  MOVE 

IT  leaders  are  growing 
increasingly  dissatisfied 
with  their  jobs.  That’s  a 
conclusion  from  executive 
search  firm  Harvey  Nash’s 
latest  survey  of  258  CIOs, 

CTOs  and  senior-  and  mid¬ 
level  IT  managers. 

They’re  not  unhappy 
because  they’re  not  well-compensated. 
The  survey  shows  that  senior  IT  lead¬ 
ers’  base  salaries  are  growing.  They’re 
dissatisfied  with  their  jobs  because 
they  see  their  influence  waning. 

According  to  the  survey,  the  num¬ 
ber  of  IT  leaders  who  view  their  role 
as  becoming  “more  strategic”  within 
their  companies  had  declined  from  80 
percent  in  2007  to  69  percent  this  year. 


What’s  more,  the  number  of 
IT  leaders  reporting  to  CEOs 
is  dropping,  too.  Only  29  - 
percent  of  respondents  call 
the  CEO  their  boss.  Finally, 
the  number  of  respondents 
who  are  members  of  their 
companies'  executive 
management  teams  is  also 
heading  south,  from  47  per¬ 
cent  in  2007  to  37  percent. 

Consequently,  more  CIOs  are  look¬ 
ing  for  a  new  job— 28  percent,  to  be 
precise— and  they're  more  interested 
in  joining  smaller  companies,  says 
Anna  Frazzetto,  Harvey  Nash's  vice 
president  of  technology  solutions. 

“One  thing  I’ve  noticed  is  that  CIOs 
who  are  switching  jobs  are  moving 
to  smaller  organizations,  where  they 


David  Gutierrez 


have  more  authority,  more  control  and 
more  power,"  she  says. 

CIO  magazine  has  also  noticed  a  vari¬ 
ety  of  IT  leaders  moving  from  big  com¬ 
panies  to  smaller  ones.  Among  them: 

David  Gutierrez  was  named  senior 
VP  and  CIO  of  Protective  Life.  He  most 
recently  worked  for  ING  Insurance 
Americas  as  regional  CIO. 

Michele  Goins  joined  Juniper  Net¬ 
works  as  its  CIO  after  serving  as  VP 
and  CIO  of  HP’s  imaging  and  printing 
group. 

Tim  Britt  left  his  “uberarchitect" 
position  at  Harrah’s  to  become  CIO 
and  CTO  at  Las  Vegas  Gaming. 

Mike  d'Almada-Remedios  gave  up 
the  CIO  post  at  eBay  and  Shopping 
.com  to  join  online  realty  company 
Move  as  its  CTO.  -Meridith  Levinson 


cioxom 


Read  Meridith  Levinson's  MOVERS  AND  SHAKERS  blog  for  the  latest  moves.  Find  it  at  blogs.cio.com. 


14  MAY  1,  2008  |  www.cio.com 


PHOTO  TOP  BY  JASENKA  LUKSA 


_ 


Hot  Tech,  Cool  Chips 


chips  Fan-cooled  PCs  will  soon  be  chillin’— -and  working  faster. 
Researchers  at  Purdue  University  and  Intel  say  they  have  developed 
heat  dissipation  technology  that  can  significantly  boost  the  perfor¬ 
mance  of  chip-cooling  systems. 

The  researchers  are  developing  ionic  wind  engines  to  work  with  current 
air-cooling  technologies  such  as  fans  and  heat  sinks.  The  devices  pass  an 
electrical  current  to  stir  up  stationary  air  molecules,  leading  to  better  air¬ 
flow  and  dissipation  of  heat.  "To  date,  we  have  demonstrated  that  the  tech¬ 
nology  can  enhance  fan  cooling  by  more  than  200  percent,"  says  Purdue 
University  professor  Suresh  Garimella,  who  is  also  a  project  researcher. 

Current  air  cooling  technology  is  attractive  because  of  its  cost 
advantages  and  ease  of  implementation.  However,  fans  and  heat  sinks 
can’t  manage  all  the  heat  chips  generate.  Ionic  wind  engines  can  be 
placed  on  a  chip  or  a  laptop  to  complement  existing  air-cooling  tech¬ 
nology  to  better  manage  heat  dissipation,  Garimella  says.  “The  ionic 
wind  technology  we  are  developing  is  designed  to  work  in  addition  to 
conventional  fan-driven  methods,"  Garimella  says. 

Ionic  winds  are  generated  when  electrically  charged  atoms  stir 
up  stationary  air  molecules.  When  a  current  flows  from  a  negatively 
charged  electrode  to  a  positively  charged  one,  it  collides  with  air  mol¬ 
ecules,  producing  positively  charged  ions  that  move  back  toward  the 
negatively  charged  electrodes,  creating  an  ionic  wind.  When  the  ionic 
wind  gets  the  air  molecules  moving,  the  airflow  on  the  chip  surface 
increases,  leading  to  better  heat  transfer  and  dissipation. 

The  researchers  are  trying  to  miniaturize  the  millimeter-scale  devices 
to  micron-scale  dimensions.  “We  are  dealing  with  challenges  to  demon¬ 
strate  the  viability  of  the  technology  at  the  micro  scale,  and  these  must 
be  overcome  before  the  technology  can  be  brought  to  market,  at  least  for 
the  chip-cooling  arena,”  says  Garimella.  -Agam  Shah 


awards  Has  your  business  used  SOA  to  achieve  enviable  ROI? 

If  so,  CIO  and  the  SOA  Consortium  invite  you  to  submit  your  story  to  the 
SOA  Case  Study  Contest.  The  contest  is  open  to  organizations  of  all  sizes 
that  have  successfully  used  service-oriented  architecture  to  create  real 
business  value.  To  qualify,  the  SOA  project  must  be  complete  with  dem¬ 
onstrated  business  results.  Winners  will  be  announced  on  Sept.  24  at  the 
SOA  Consortium  meeting  in  Orlando,  Fla.,  and  in  the  October  issue  of  CIO. 
Submissions  will  be  accepted  through  June  30.  For  more  information  and 
to  apply,  visit  www.soa-consortium.org/contest-cs. 


Recruiting  Temporary  IT  Staff: 
Not  Enough  Time  To  Do  It  Right, 
But  Do  You  Really  Have  Enough 
Time  To  Do  It  Over? 


TEKsystems'  Thought  Leadership  Series 
White  Paper  -  N0.1  i  zcoa 


A  comprehensive  strategy 
for  engaging  the  right 
person  the  first  time 


As  a  premier  provider  of  technology 
staffing  and  services,  securing 
the  right  IT  person  for  the  job 
is  something  we  do  very  well. 

With  hundreds  of  thousands  of 
successful  placements  around  the 
world  and  over  20,000  Technical 
Professionals  on  site  every  day, 
clients  rely  on  our  ability  to  find 
the  right  'one'  for  the  job. 

TEKsystems'  current  white  paper 
identifies  10  key  factors  to  consider 
when  recruiting  temporary  IT  talent 
and  how  you,  too,  can  conduct  a 
successful  engagement  process. 

To  view  our  white  paper  online,  go  to: 
www.teksystems.com/whitepaper. 

Our  goal  is  that  the  IT  community 
at  large  finds  benefit  from  the 
insights  we  continue  to  share  in 
our  Thought  Leadership  Series. 

www.teksystems.com/whitepaper 

TEK 

systems, 

TEKsystems,  Inc.  is  an  Allegis  Group,  Inc.  company. 
Copyright  ©  2008  All  rights  reserved. 
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ADVERTISEMENT 


Information  Management: 

Best  Efforts  or  Best  Practice? 


Survey  reveals 
gap  between 
best  effort  and 
best  practices 
for  records 
management 


market  puise 


a  A  recent  study  by  IDG  Research  Services  reveals 
*■  that  IT  professionals  understand  the  fundamen¬ 
tals  of  information  management,  but  there’s 
room  for  improvement. 


Survey  re¬ 
spondents: 


•94%  have 
created  or 
are  in  the 
process  of 
creating 
written 
policies. 

•20%  keep 
everything 
indefinitely 
or  selec¬ 
tively  retain 
data  indefi- 
nitely. 


•17%  are 

willing  to 

consider 

Storage- 

as-a-Ser- 

vice. 


This  is  aptly  demonstrated  by  the  fact  that  the  majority 
of  survey  respondents  express  an  appreciation  for  out¬ 
sourcing  as  a  best  practice  in  information  management, 
yet  only  17  percent  are  ready  to  embrace  the  Storage- 
as-a-Service  solution. 

“So  one  question  remains,”  says  Fred  Engel,  SVP  of 
Engineering  and  CTO  of  Iron  Mountain  Digital.  “Are 
CIOs  doing  enough  that  they  would  bet  their  badges 
on  their  current  information  management,  storage  and 
data  protection  strategy?” 

Progress,  but  Still  Room  to  Improve 
The  IDG  study  identifies  four  decisive  actions  organi¬ 
zations  are  taking  to  better  manage  and  protect  their 
data.  But  it  also  reveals  areas  where  they  are  coming 
up  short. 

Policies  for  retention.  A  full  94  percent  of  respondents 
say  they  have  created  or  are  in  the  process  of  creating 
written  policies  for  managing  electronic  information. 
Given  the  overwhelming  response,  one  must  question 
how  formal  those  policies  are.  Best  practices  mandate 
that  policies  be  continually  updated  and  formally 
communicated,  and  that  they  extend  enterprise-wide, 
across  all  media  types. 

Separate  backup  and  archive.  Also  encouraging,  nearly 
half  of  the  respondents  archive  separately  from  their 
backups.  Yet  39  percent  still  do  not  discern  between 
the  two  disciplines.  As  a  best  practice,  CIOs  must  con¬ 
sider  the  business  implications  associated  with  both 
scenarios,  rather  than  turn  to  what’s  most  comfortable. 

Selective  retention  and  destruction.  The  majority  of 
respondents  are  selectively  retaining  electronic  data 
for  a  specified  time.  However,  about  20  percent  keep 
everything  indefinitely,  or  selectively  retain  data  indefi¬ 
nitely.  Today,  enterprises  can’t  simply  rely  on  nightly 
backups;  they  must  implement  archiving  protocols 
based  on  the  business  and  legal  implications  of  specific 
data  types. 

Archival  technology  investments.  Some  62  percent  of 
respondents  are  already  investing  in  archival  technol¬ 


i 


ogy.  "Though  in  a  previous  IDG  survey,  we  learned 
that  only  38  percent  of  enterprises  index  their  data,” 
Engel  observes.  Indexing  is  certainly  a  best  practice  in 
eDiscovery,  as  a  means  to  locate,  analyze  and  present 
requested  records. 

Moving  Storage  to  a  Service 
The  greatest  discrepancy  between  best  effort  and 
best  practice  appears  when  respondents  share  their 
thoughts  on  outsourcing. 

The  Storage-as-a-Service  solution  is  allows  enterprises 
to  selectively  remove  information  from  an  operational 
system  and  store  it  offsite  with  a  third  party  for  elec¬ 
tronic  archival  and  retrieval. 

“It’s  clear  from  the  survey  results  that  IT  leaders  under¬ 
stand  the  potential  upside  to  outsourcing  their  storage 
requirements,”  says  Engel.  “So  it’s  no  surprise  that 
storage  as  a  service  is  emerging  as  an  overarching  best 
practice  in  information  management.” 

Storage-as-a-Service  enables  transparent  data  protec¬ 
tion  and  recovery  across  servers,  shared  files  and 
desktops,  while  meeting  more  stringent  recovery  time 
objectives  and  recovery  point  objectives.  Enterprises 
can  also  use  it  to  leverage  state-of-the-art  technology 
without  the  capital  investment— for  example,  for  the 
indexing  capabilities  required  for  eDiscovery.  And  re¬ 
spondents  cite  many  risk  and  cost  benefits  to  Storage- 
as-a-Service,  including  simplified  legal  discovery  and 
enhanced  compliance  as  well  as  improved  utilization 
and  less  floor  space. 

Still,  only  17  percent  of  respondents  express  readiness 
to  consider  storage  as  a  service.  So  how  confident  are 
CIOs  in  their  strategies,  really,  now  that  the  benefits  of 
storage  as  a  service  are  understood? 

Go  to  www.cio.com/whitepapers/ironmountain 
/storage  to  obtain  a  free  download  of  the  research 
results  with  insightful  commentary  from  key 
respondents. 
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When  your 
customers  talk, 
do  you  listen 
closely  enough? 
More  CIOs 
are  deploying 
text  analytics 
technology 
to  examine  cus¬ 
tomer  comments 
on  websites, 
surveys  and  more. 
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FROM  INCEPTION  TO  IMPLEMENTATION  — I. T.  THAT  MATTERS 


PanningforGoldin 
Customer  Chats 


BY  JOHN  EDWARDS 

CRM  |  If  you  ’re  in  the  hotel  business,  customer  satisfaction  isn’t  just  a  key  metric, 
it’s  one  that  can  make  or  break  the  company.  But  until  recently,  addressing  sources  of 
customer  dissatisfaction  was  taking  too  long  for  Gaylord  Hotels.  Nashville,  Tenn. -based 
Gaylord,  which  operates  4  resort  hotels  in  the  Nashville;  Dallas;  Orlando,  Fla.;  and 
Washington  areas,  needed  a  quick,  clear  view  of  how  customers  and  meeting  planners 
viewed  its  properties  and  services,  as  well  as  alerts  to  budding  problems. 

“Our  survey  vendor  would  do  manual  categorization,  essentially  reading  [customer] 
comments  and  getting  back  to  us,”  says  Tony  Bodoh,  Gaylord’s  operations  analysis  man¬ 
ager.  In  search  of  faster  results,  Gaylord  turned  to  text  analytics  technology  from  Clara- 
bridge,  beginning  with  a  pilot  test  in  2007,  followed  by  a  phased  deployment  in  2008. 

Text  analytics,  often  referred  to  as  “voice  of  the  customer  technology,”  is  designed  to 
squeeze  sentiment  out  of  customer  communications  rather  than  simply  retrieve  isolated 
nuggets  of  information,  as  traditional  text  mining  does. 

“One  of  the  key  benefits  the  Clarabridge  tool  provides  is  essentially  overnight  categoriza¬ 
tion  and  clustering  of  all  the  comments,”  Bodoh  says,  “which  was  taking  us  several  weeks 
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“You  can  have  business  users  who  are 
not  analysts  really  understand  ‘What 
are  my  top  10  problems?’  or  ‘How  is 
this  issue  trending  overtime?”’ 

-Tony  Bodoh,  operations  analysis  manager,  Gaylord  Hotels 


to  a  month  with  the  previous  vendor.” 

Bodoh  says  the  technology  is  already 
beginning  to  help  the  company  pinpoint 
specific  sources  of  guest  dissatisfaction. 
“One  property  may  use  a  different  ven¬ 
dor  for  purchasing  a  particular  product,” 
Bodoh  says.  Viewing  guest  comments  on 
topics  such  as  bathroom  cleanliness  or 
restaurant  service  helps  Gaylord  man¬ 
agers  spot  weak  performers,  he  says. 

“We  are  also  using  the  software  to 
understand  best  practices  across  our 
hotels,  and  how  to  bring  those  best  prac¬ 
tices  from  one  hotel  to  another  hotel,  or 
from  one  department  to  another  depart¬ 
ment,”  he  adds. 

Clarabridge,  along  with  Attensity, 
Business  Objects,  SAS  and  several  other 
vendors,  offers  software  designed  to  help 
enterprises  understand  and  learn  from 
what  customers  are  saying  about  prod¬ 
ucts  and  services.  Along  with  surveys, 
e-mail  and  phone  calls,  the  technology 
can  monitor  blogs,  text  messages,  online 
chats,  phone  calls  (through  speech-to-text 
conversion)  and  social  network  profiles. 

While  text  analytics  today  is  far  from 
an  out-of-the-box  solution,  CIOs  say,  the 
technology  may  give  you  insight  into 
customer  thinking  that’s  hard  to  put  a 
price  on. 

In  Search  of  Trouble 

If  your  company  allows  customers  to  talk 
about  products  and  services  on  the  com¬ 
pany  website,  for  example,  text  analytics 
tools  can  help  you  analyze  what  those 
comments  and  chats  say,  to  improve 
business  decisions  and  strategy. 

“Just  about  anything  that’s  in  text  or 
can  be  converted  into  text,”  can  be  ana¬ 
lyzed,  says  Matthew  Brown,  principal 
analyst  for  information  and  knowledge 
management  at  Forrester  Research. 
Businesses  in  diverse  fields,  including 
transportation,  hospitality,  business 
and  consumer  products,  retail,  enter¬ 
tainment  and  even  law,  are  beginning  to 
embrace  text  analytics,  Brown  notes. 

Text  analytics  tools  also  enable  an 
enterprise  to  scour  the  digital  grape¬ 


vine  to  pinpoint  budding  problems  that 
could  tarnish  a  brand’s  luster,  says  Fern 
Halper,  a  partner  at  Hurwitz  &  Asso¬ 
ciates,  a  consulting  and  research  firm. 
“The  software  helps  companies  under¬ 
stand  what  customers  are  saying  about 
their  brands,  so  they  can  actually  get  a 
head  start  in  finding  problems  before 
they  occur  and  make  course  corrections 
in  midstream,”  Halper  says. 

For  Internet  travel  giant  Travelocity, 
that  desire  is  keen,  says  Ginny  Mahl, 
Travelocity’s  VP  of  customer  care  and 
sales.  And  every  day,  customers  send  the 
company  plenty  of  content  to  examine, 
Mahl  says.  From  North  America  alone, 
each  month  Travelocity  receives  some 
25,000  to  30,000  customer  satisfaction 
survey  responses,  35,000  to  50,000 
e-mails  and  400,000  calls,  she  says. 

To  help  sort  through  this  digital  hay¬ 
stack  for  insight  needles,  Travelocity 
turned  to  Attensity’s  text  analytics  tools. 
At  press  time,  Travelocity  was  prepar¬ 
ing  to  deploy  a  production  version  of 
the  software.  “We  are  using  it  primar¬ 
ily  to  read  verbatim  feedback  from  our 
customers  to  gain  insight  into  likes  and 
dislikes  about  Travelocity,  and  recom¬ 
mendations  they  have  for  improve¬ 
ments  in  our  products  and  services,” 
Mahl  says.  “In  particular,  the  applica¬ 
tion  will  let  us  do  a  much  deeper  dive 
into  the  root  causes/drivers  of  the  sat¬ 
isfaction  scores  we  receive.” 

Mahl  expects  that  the  software  will 
enable  Travelocity  to  detect  consumer 
sentiment  trends  that  may  impact  cus¬ 
tomer  satisfaction.  Mahl  offers  an  exam¬ 
ple:  “Through  a  very  simple  query,  we’re 
able  to  ‘read’  our  customer  comments  and 
find  out  if  the  amenity  offerings  at  a  par¬ 


ticular  hotel  have  changed,  allowing  us  to 
update  our  website  content  more  rapidly,” 
she  says.  “This  capability  is  one  of  those 
very  simple  things  that  can  have  a  big 
impact  on  our  customers’  experience.” 

Text  analytics  also  promises  to  help 
Travelocity  bolster  its  partner  relation¬ 
ships,  Mahl  says.  “We  [receive]  sup¬ 
plier-specific  feedback,  which  we  can 
feed  back  to  our  partners  so  they  also 
have  a  better  understanding  of  our 
mutual  customers’  opinions,”  she  says. 
“Sharing  valuable  customer  informa¬ 
tion  is  in  both  of  our  best  interests.” 

Travelocity,  which  first  learned 
about  text  analytics  from  vendors  who 
approached  the  company,  evaluated  sev¬ 
eral  products,  Mahl  says.  Two  factors 
drove  Travelocity  toward  Attensity,  she 
says.  “Attensity’s  solution  lets  us  acquire 
an  enterprise  license  for  the  software, 
which  we  can  scale  much  more  econom¬ 
ically  as  we  grow  our  application  of  text 
analytics  to  additional  data  or  new  data 
sets,”  Mahl  says.  “They  were  also  able 
to  provide  a  travel  industry  taxonomy 
to  jump-start  analysis.” 

Rolled-Up  Sleeves  Needed 

At  Gaylord  Hotels,  the  Clarabridge 
tools  are  helping  the  company  address 
a  variety  of  emerging  problems  quickly, 
Bodoh  says. 

For  example,  the  software  recently 
confirmed  for  Gaylord  managers  a 
problem  synchronizing  its  automatic 
door  locks,  preventing  key  holders  from 
opening  room  doors.  “For  a  few  days, 
we  were  seeing  a  spike  in  the  number  of 
complaints  around  these  key  problems,” 
Bodoh  says. 

As  it  turned  out,  the  annual  change- 
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THE  BROCADE  DCX  BACKBONE 


•  Unprecedented  performance 
and  scalability 

•The  platform  for  virtualized 
data  centers 

•A  strategic  solution  with  built-in 
investment  protection 


A  BREAKTHROUGH  IN  THE  EVOLUTION  OF  THE  DATA  CENTER 

With  the  new  Brocade’  DCX™  Backbone,  you  can  connect  your 
data,  applications,  servers,  and  storage  through  a  single 
platform  that  significantly  reduces  cost  and  complexity. 

The  vast  majority  of  the  world’s  leading  companies 
rely  on  Brocade  solutions  to  power  their  data  centers. 

Why  not  build  on  proven  technology  you  already  own? 
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We  [receive]  supplier-specific 
feedback,  which  we  can  feed  back 
to  our  partners  so  they  also  have  a 
better  understanding  of  our  mutual 
customers’  opinions.” 

-Ginny  Mahl,  VP  of  customer  care,  Travelocity 


over  from  daylight  saving  time  to  stan¬ 
dard  time  was  the  culprit. 

“We  identified  that  it  was  related  to 
the  changing  of  the  time  in  the  software 
that  runs  the  locking  system,”  he  says. 
“That’s  an  example  of  something  that 
we  normally  wouldn’t  have  seen,  but  all 
of  a  sudden  it  popped  up  to  the  top.” 

“Before  text  analytics  arrived,  enter¬ 
prises  were  limited  to  manually 
analyzing  a  small  percentage  of  the 
unstructured  customer  information 
they  received,”  says  Sid  Banerjee,  Clara- 
bridge’s  CEO  and  chairman. 

But  while  text  analytics  can  rapidly 
generate  vast  amounts  of  deep  customer 
insight,  the  technology  is  still  far  away 
from  becoming  an  out-of-the-box  solu¬ 
tion,  IT  leaders  say. 

“I’d  consider  it  complex,”  Travelocity’s 
Mahl  says.  “For  our  purposes,  in  order  to 
get  full  value  from  the  application,  we  will 
have  to  train  analysts  to  use  the  software, 
invest  in  tuning  the  taxonomy  to  produce 
more  granular  analyses  and  integrate 
the  output. ..with  our  enterprise  data 
warehouse  so  we  can  use  the  combined 
data  for  even  greater  customer  insight.” 

Mahl  would  also  like  to  see  Attensity 
extend  its  software  to  include  real-time 
access  to  additional  data  sources,  such 
as  websites  and  blogs,  both  of  which 
would  allow  Travelocity  to  monitor 
even  more  customer  views. 

Gaylord’s  Bodoh  notes  that  many  of 
the  text  analytics  applications  that  he’s 
examined  support  only  a  limited  range 
of  analytic  topics.  “Some  would  only  be 
able  to  categorize  40  or  50  problems,” 
he  says.  “With  the  categorization  model 


that  we  have  in  place,  we  have  over  300 
categories.” 

IT  leaders  examining  these  tools 
should  also  consider  the  number  of 
“sentiment”  words  that  an  application 
can  recognize,  Bodoh  warns. 

“Clarabridge  has  the  capability  to 
really  comprehend  what  the  sentiment 
is  for  about  25,000  to  30,000  words, 
and  you  can  tweak  that  for  your  indus¬ 
try,”  Bodoh  notes. 


New  Frontiers 

As  a  growing  number  of  enterprises 
adopt  text  analytics,  the  technology  is 
likely  to  migrate  into  other  business 
applications  that  brush  up  against 
users’  thoughts  and  opinions. 

For  content  management  products, 
Halper  notes,  text  analytics  can  be  a 
complementary  technology;  for  exam¬ 
ple,  text  analytics  can  help  categorize 
or  enrich  content,  analyze  content  in  a 
data  repository  or  improve  workflow. 

Also,  vertical  industries,  such  as  the 
legal  industry,  are  becoming  increas¬ 
ingly  intrigued  by  text  analytics’  abil¬ 
ity  to  add  insight  to  an  array  of  routine 
business  tasks,  she  says. 

Today,  many  text  analytics  users 
believe  that  the  technology  provides 
a  useful  bridge  to  help  nontechnical 
staff  members  get  a  handle  on  complex 


IT  leaders  who  want  to  focus  on  customers 
need  to  watch  their  language  and  metrics, 
says  Direct  Energy’s  CIO.  See  END  USERS 
ARE  NOT  YOUR  CUSTOMERS  at  www.cio 


.com/article/167001. 
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of  online 
retailers  will 
integrate 
customer 
ratings  and 
reviews  by 
mid-2008. 
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problems  without  running  high-level 
searches. 

“You  can  have  business  users  who  are 
not  analysts  really  understand  ‘What  are 
my  top  10  problems?’  or  ‘How  is  this  issue 
trending  over  time?”’  Bodoh  says. 

The  software  makes  it  easier  for  just 
about  any  business  to  maintain  cus¬ 
tomer  service  standards  while  operating 
at  maximum  efficiency,  Bodoh  believes. 
“Managers  don’t  have  to  worry  about 
having  to  do  a  ton  of  analytics,”  he  says. 
“It’s  very  easy  for  them  to  understand.” 

Mahl,  meanwhile,  says  she’s  satis¬ 
fied  with  the  results  she’s  seen  so  far. 
“Although  we  are  just  getting  started 
with  the  production  implementation, 
we  have  seen  nothing  that  changes  our 
opinion,”  she  says. 

One  warning:  Do  understand  that 
these  are  often  young  and  complex  soft¬ 
ware  packages.  If  your  enterprise  plans 
to  evaluate  the  technology,  test  it  with 
real  consumer  data,  Mahl  advises. 

“Go  through  a  thorough  analysis  of 
the  software  and,  if  possible,  a  live  pilot 
focused  on  real  business  use  cases  in 
your  company  to  demonstrate  that  the 
software  is  suitable  for  the  intended  use 
in  your  environment,”  Mahl  says.  BO 


John  Edwards  is  an  Arizona-based  freelance 
writer.  To  comment  on  this  article,  please  go 
to  www.cio.com/article/335715. 
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Amazing  things  began  to  happen  when  Intel®  and  Sun®  started  working  together.  Intel's  endorsement 
of  Sun's  Solaris®  OS  for  the  Intel  platform  created  new  choices  for  customers,  with  breathtaking 
performance.  Simultaneously,  after  Sun's  legendary  server  teams  got  ahold  of  the  Quad-Core 


Intel®  Xeon®  processor  7300,  they  built  the  Sun  Fire  X4450  -  the  world's  highest  density  4-socket 


x86  rack  mount  server. 


So  whether  you’re  running  Linux®,  Solaris,  or  Windows®  -  on  VMware®  or  Sun's  newest  xVM 
virtualization  platform,  we’ve  got  you  covered. 


Apply  for  a  free  6o-day  trial  of  the  Sun  Fire  X4450  at  sun.com/tryintelservers. 
Call  your  local  Sun  Sales  Representative,  Sun  Authorized  Partner  or  (888)  516-9362. 
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THINK  TANK 


IT  Frameworks  Don’t 
Guarantee  IT  Success 

It  isn’t  enough  for  your  IT  organization  to  have  mature  management  and 
software  development  processes  if  the  business  organizations  don’t  do  their  part. 
Companies  also  need  an  IT  maturity  model  for  the  enterprise. 


IOs  care  a  lot  about  their  IT  organization's  maturity. 

CMMI,  Cobit  and  ISO  are  well-established  frameworks  that  IT  orga¬ 
nizations  use  to  assess  their  evolutionary  development,  whether  in 
project  and  software  processes,  service  delivery,  security  and  risk 


management  or  IT  controls.  Research  and  consulting  firms  have  large  and 


established  revenue  streams  helping  IT  organizations  assess  themselves  and 


advance  from  one  level  of  maturity  to  the  next. 

But  to  my  knowledge,  the  consultants  have  yet  to 
establish  a  direct  correlation  between  these  levels  of 
maturity  and  the  degree  of  business-IT  alignment, 
or  how  successful  the  IT  organization  is  at  deliver¬ 
ing  what  the  business  wants  and  expects. 

Alignment  has  improved  only  slightly  since 
2000,  even  though  IT  executives  say  it’s  a  top  goal 
almost  every  time  they’re  asked.  According  to  a  Sep¬ 
tember  2007  survey  by  the  Society  of  Information 
Management  and  MIS  Quarterly,  IT  organizations 
have,  on  average,  made  little  progress  in  alignment 
in  seven  years. 

Researchers  Jerry  Luftman  and  Rajkumar  Kem- 
paiah  annually  surveyed  IT  executives  between 
2000  and  2007  about  how  evolved  their  organi¬ 
zations  were  for  six  components  of  alignment:  com¬ 


munications,  value,  governance,  partnership,  scope 
and  architecture,  and  skills.  A  score  of  1  indicated 
responders  had  an  initial,  ad  hoc  process  for  that 
component,  and  a  score  of  5  equaled  an  optimized 
process.  The  respondents’  average  score  (across  all 
components)  during  the  period  between  2000  and 
2003  was  2.9,  and  the  average  between  2004  and 
2007  was  3.2. 

That’s  not  a  big  jump  for  a  seven-year  period. 
Something  is  preventing  IT  organizations  from 
moving  alignment  along. 

Do  Mature  IT  Practices  Matter? 

Maybe  CIOs  and  consultants  have  their  eye  on  the 
wrong  ball:  They  are  too  focused  on  the  best  prac¬ 
tices  of  the  IT  organization.  Perhaps  the  degree  of 
rigor  in  software  development  processes  (CMMI)  or 
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ARE  DATACENTER  COOLING  PROBLEMS  TAKING  OVER  YOUR  LIFE? 

Call  us.  We're  Digital  Realty  Trust,  the  largest  owner  and  operator  of  datacenters  in  the  industry.  Since  we've  built 
over  200  datacenters,  we  know  how  to  deliver  facilities  with  efficient  cooling  architectures.  To  receive  a  limited  edition 
Hot  Head  bobblehead  and  learn  more,  download  our  whitepaper,  "A  Datacenter  Cooling  Primer,"  or  sign  up  for  one  of 
our  upcoming  datacenter  cooling  seminars  at  www.digitalrealtytrust.com/hhl 
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looking  at  the  control  and  audit 
processes  (Cobit)  are  necessary 
for  running  a  tight,  internal  IT 
ship,  but  insufficient  in  bringing 
IT  closer  to  the  business. 

Let’s  think  of  all  the  ways  an  enterprise  can  derail  a  well- 
intentioned  IT  organization  that  is  trying  to  move  along  in 
its  practices  but  failing  to  achieve  a  high  level  of  alignment. 
Perhaps  the  primary  metric  for  IT  is  the  cost  of  IT  itself  and 
not  the  impact  of  technology  use  in  the  business.  Perhaps 
business  participation  in  strategic  projects  is  sporadic,  but 
the  project  is  expected  to  proceed  anyway.  Perhaps  senior 
executives  are  naive  about  ways  technology  could  help  their 
business  units,  or  they  quash  efforts  by  IT  staffers  who  try 
to  make  recommendations.  Perhaps  the  CEO  has  not  set  any 
specific  expectations  with  the  CIO  and  is  only  monitoring 
the  role  by  the  absence  of  complaints  about  IT.  I  could  go  on, 
but  you  get  the  idea. 

Perhaps  the  best  framework  for  IT  won’t  be  about  the 
department  or  the  CIO  at  all.  Instead,  let’s  see  consultants 
sink  their  teeth  into  measuring  the  enterprise’s  level  of  matu¬ 
rity  in  its  view  and  use  of  technology.  Perhaps  consultants 
_  should  turn  their  atten¬ 
tion  to  CEOs,  CFOs  and 
COOs,  and  help  them 
figure  out  how  to  evolve 
their  approach  to  IT. 
These  new  maturity 
metrics  could  include 
the  criteria  they  use  to  hire  and  evaluate  the  performance 
of  the  CIO,  how  they  set  expectations  for  IT  and  the  extent 
to  which  they  provide  appropriate  business  resources  to 
mission-critical  technology  projects. 

Let’s  stuff  those  ideas  into  a  framework  and  look  critically 
at  the  IT  maturity  of  today’s  enterprises. 


An  enterprise  that  is  mature  in  its  use  and 
oversight  of  technology  will  have  an  IT  orga¬ 
nization  that  is  well-aligned  and  successful. 


Taking  Care  of  Business 


Learn  how  one  CIO  stays  focused  on 

the  BUSINESS  RESULTS  OF  I.T.  at 
www.cio.com/article/186550. 
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well-articulated  expectations  of  the  CIO.  IT  is  expected  to 
contribute  revenue-generating  ideas  and  C-level  executives 
are  actively  engaged  with  the  CIO  in  sponsoring  and  track¬ 
ing  progress. 

3.  Strategic  capability.  At  one  end  of  the  maturity  curve 
for  this  metric,  some  firms  would  have  great  difficulty  clari¬ 
fying  a  long-term  strategic  direction  for  their  business  and 
a  tough  time  sustaining  attention  for  long-term  technology 
projects.  At  the  most  mature  firms,  the  opposite  would  be 
true:  Not  only  would  they  have  long-term  strategic  goals,  but 
there  would  be  sustained  attention  to  IT  as  a  way  to  achieve 
those  goals. 

4.  Business  department  engagement.  Experienced  IT 
professionals  will  attest  that  a  business  department’s  role 
in  IT  projects  can  vary  widely.  At  the  lowest  level  of  matu¬ 
rity,  firms  would  have  junior  business  users  (or  none  at  all) 
participate  in  requirements  definition  and  implementation 
of  IT  projects.  And  they  would  wait  until  a  project  is  done  to 
announce  that  it  didn’t  meet  their  needs.  At  the  most  evolved, 
senior  business  execs  would  place  a  top  priority  on  working 
on  IT  projects  themselves  to  ensure  that  the  projects  reach 
completion  and  match  the  requirement  and  expectation. 

5.  Change  management  skills.  Technology  initiatives 
are  all  about  change.  Immature  firms  would  have  little  under¬ 
standing  of  how  to  manage  change  in  their  organizations, 
whether  the  task  is  communicating,  measuring  or  complet¬ 
ing  initiatives  that  at  one  point  seemed  like  a  good  idea.  And 
at  the  other  end  of  the  maturity  spectrum,  firms  would  see 
change  management  as  a  core  competence  and  have  staff 
trained  in  change  management  processes  seeded  in  their 
business  units. 


An  Enterprise  IT  Maturity  Model 

Here  are  five  elements  to  jump-start  the  work  of  consultants 
and  standards  organizations. 

1.  Technology  appetite.  Organizations  vary  in  their  curi¬ 
osity  about  and  tolerance  for  new  tools,  depending  on  their 
industry,  the  firm’s  culture,  prior  experience  and  the  interest 
level  of  management.  The  maturity  of  a  company  on  this  met¬ 
ric  could  range  from  a  resistance  to  new  technologies  of  any 
type  all  the  way  to  a  must-have-it  for  competitive  advantage 
level  of  engagement. 

2.  C-level  involvement.  This  includes  executive  expec¬ 
tation  and  oversight  of  the  C-level  exec  to  whom  the  CIO 
reports.  Range  of  maturity  could  span  a  hire-and-delegate 
immaturity  where  the  CEO  establishes  no  or  low  expecta¬ 
tions  of  the  CIO,  to  a  level  of  evolution  where  the  CEO  has 


Mature  Enterprises  Beget  Effective  IT 

An  enterprise  that  is  mature  in  its  use  and  oversight  of  tech¬ 
nology  will  have  an  IT  organization  that  is  well-aligned  and 
successful.  I’ll  bet  on  that. 

Now,  are  there  any  consultants  out  there  willing  to  solidify 
the  criteria  and  start  benchmarking  companies  in  their  enter¬ 
prise  IT  maturity?  Can  they  deliver  consulting  to  help  C-level 
execs  move  up  the  maturity  curve?  BE 


Laurie  M.  Orlov  does  research  and  consulting  on 
business  and  technology  strategy.  She  is  a  for¬ 
mer  vice  president  and  principal  analyst  at  For¬ 
rester  Research.  To  comment  on  this  article,  go  to 
www.cio.com/article/192901. 
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Do  you  have  information  trapped  in  silos? 

Do  your  people  waste  time,  get  frustrated,  and 
have  to  work  with  disparate  systems  and  processes? 
Are  you  driving  business  value  and  managing  IT 
as  efficiently  as  you  could? 


How  much 
do  IT  bottlenecks 


cost  you? 


Our  unique  Integrated  Infrastructure  Management™  (IIM)  solution 
helps  eliminate  silos  and  reduce  support  needs.  In  a  case  study 
published  by  a  leading  analyst  firm,  it  helped  Sunoco  increase 
productivity  46%,  reduce  help  desk  incidents  23.6%, 
and  boost  user  satisfaction  ratings  to  an  all-time  high. 


There  are  bigger  IT  outsourcing  companies,  but 
none  better.  There  is  only  one  place  to  get  tier-one 
service  quality  at  a  tier-two  price. 


Learn  more  at  compucom.com. 


CompuCom 


IT  Outsourcing  Services  •  Application  Services  •  Software  Services  •  Hardware  Services 
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More  CIOs  are  being  asked  to  take  on  responsibilities 
outside  of  IT.  And  it’s  not  just  the  business  that  ben¬ 
efits.  Expanding  your  job  description  can  be  good  for 
yourcareer.too— provided  you  masterthe  politics  and 
rethink  howyou  run  IT.  by  Stephanie  overby 


Among  the  entire  management  team  at  Best  Western  International, 

Scott  Gibson  has  the  longest  title. 

Sure,  there’s  a  tendency  toward  wordiness  when  it  comes  to  describing  positions  at  the 
hotelier.  Look  at  the  nameplate  on  Ric  Leutwyler’s  door:  Senior  Vice  President  of  Brand 
Quality  and  Member  Service. 

But  the  extra  ink  required  to  print  Gibson’s  latest  batch  of  business  cards  goes  beyond 
verbosity.  The  47-year-old  technology  executive,  who  joined  the  company  in  2005  as  CIO 
and  senior  vice  president  of  distribution,  last  summ  er  added  a  third  title:  senior  vice  presi¬ 
dent  of  strategic  services.  That  means  Gibson  heads  up  the  IT  organization  and  the  call 
center  operations  team,  where  he  oversees  all  methods  of  distribution  from  call  centers  to 
travel  agents  to  online  travel  sites,  and  he  is  in  charge  of  corporate  strategic  planning. 

(For  the  record,  that  makes  him  CIO  and  Senior  Vice  President,  Distribution  and  Stra¬ 
tegic  Services.) 

While  that  drawn-out  descriptor  may  make  him 
unique  among  his  Best  Western  peers,  Gibson’s 
hardly  singular  when  judged  against  the  CIO  cohort. 

More  than  half  of  CIOs  report  having  responsibilities 
outside  of  IT,  according  to  a  survey  of  1,500  CIOs  by 
Gartner  Executive  Programs.  Meanwhile,  anecdotal 
evidence  suggests  that  an  increasing  number  of  IT 
leaders  are  accepting  official  positions  that  extend 
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Reader  ROI 

::  Why  CIOs  are  taking  on 
responsibilities  outside  of  IT 

::  The  pros  and  cons  of  having 
multiple  job  roles 

::  The  implications  for  the 
CIO  role 
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Scott  Gibson.  Best  Western 
CIO  and  SVP,  distribution  and 
strategic  services,  volunteered 
for  one  of  his  extra  roles  because 
he  had  a  strong  vision  for  how 
the  job  should  be  done. 
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beyond  the  traditional  technology  function. 

“We’ve  seen  enough  of  it  going  on  that  we 
can  say  it  really  is  a  trend,”  says  Bobby  Cam¬ 
eron,  vice  president  and  principal  analyst 
for  Forrester  Research. 

It’s  what  Martha  Heller,  managing  direc¬ 
tor  of  the  IT  leadership  practice  at  execu¬ 
tive  search  firm  ZRG,  calls  the  “ClO-and” 
phenomenon.  The  new  CIO-plus  roles  are 
more  substantial  than  hyphenate  titles  of 
old  like  CIO  and  vice  president  of  e-busi¬ 
ness.  Today,  notes  Heller  (who  is  also  a  CIO 
columnist),  “the  add-on  titles  are  typically 
more  strategic,  enterprisewide  and  often 
customer-facing.” 

That  seems  like  good  news.  CIOs  have 
been  so  successful  that  their  bosses  are 
betting  they’ll  add  value  outside  of  IT— an 
affirmation,  if  there  ever  was  one,  of  the 
business  value  of  an  IT  leader.  And  CIOs  in 
these  magnified  roles  are  better  positioned 
to  deliver  improved  processes  and  business 
results  than  if  they  held  only  the  technology 
position.  “CIOs  have  a  greater  ability  to  influ¬ 
ence  their  firms’  direction— process,  strategy, 
business  models— when  they  have  more  of  a 
role  on  the  business  side,”  says  Cameron. 

But  a  hybrid  role  has  its  downside.  It 
requires  infinitely  more  from  the  IT  leader— 
and  the  IT  staff,  who  have  to  take  on  more 
responsibility  as  their  bosses’  workload  com¬ 
pounds.  If  you  think  you’ve  got  your  hands 
full  with  just  IT,  well,  forget  it.  What’s  more, 
having  a  dual  role  can  breed  resentment 
outside  IT  as  CIOs  encroach  on  others’  turf. 

Yet  some  experts  say  these  hybrid  roles 
are  a  necessary  outgrowth  of  the  increas¬ 
ingly  business-focused  CIO  role.  “The  natu¬ 
ral  evolution  is  to  have  the  topmost  role  of 
the  senior  technology  executive  become  a 
general  management  role,  not  a  technology 
role,”  says  Cameron.  “As  a  result,  it  is  nor¬ 
mal  for  [today’s]  CIO  to  pick  up  additional 
responsibilities  that  require  the  same  style 
of  general  management  discipline.” 

But  these  CIO-“and”  roles  have  some  wondering  what  will 
become  of  the  standalone  chief  information  officer  role.  “The 
CIO  is  going  to  be  more  of  a  process  innovation  and  business 
transformation  agent  who  understands  how  to  apply  technol¬ 
ogy  to  support  strategic  initiatives,”  says  Sam  Gordon,  CIO 
practice  director  at  Harvey  Nash  Executive  Search.  “I  think  it’s 
unlikely  that  the  CIO  role  as  we  know  it  will  exist  in  10  to  15 
years’  time.” 


Companies  may  be  exploiting 
CIOs  with  extra  roles,  says 
A1  Etterman,  EVP  and  chief 
administrative  officer  (formerly 
CIO,  SVP  of  customer  advocacy 
and  CAO)  with  JDS  Uniphase. 
But  that’s  acceptable  if  there 
are  benefits  for  the  role  and  the 
individual. 


A 
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Hyphenates  Are  Hot  Again 

There  is  precedent  for  the  CIO-plus 
role.  In  the  1990s,  you  couldn’t  throw 
a  rock  in  IT  leadership  circles  without 
hitting  someone  with  e-commerce-this 
or  digital-that  tacked  on  to  his  title.  But 
the  trend  subsided  when  the  dotcom 
bubble  burst.  Other  title  enhancements 
have  tended  to  be  industry-specific  or 
related  to  how  a  particular  company 
uses  IT.  In  software  companies,  there’s 
the  ever-present  CIO-CTO  hyphenate. 
Manufacturing  companies  have  been 
known  to  add  supply  chain  duties  to 
the  CIO  position. 

But  the  expanded  CIO  role  of  today, 
say  experts,  is  different.  IT  executives 
are  taking  on  corporate  strategy,  head¬ 
ing  up  revenue-producing  business 
units,  and  taking  on  roles  as  varied 
as  logistics  and  international  expan¬ 
sion.  According  to  the  2007/2008 
CIO  Survey  by  Harvey  Nash  USA,  44 
percent  of  respondents  reported  hav¬ 
ing  responsibilities  outside  of  IT.  “The 
kind  of  stuff  CIOs  are  good  at— con¬ 
sistency,  predictability,  an  organized 
approach  to  problem  solving— can  be 
a  unique  skill  set  in  many  companies,” 
says  Cameron.  “IT  is  one  of  the  only 
departments  that  spans  the  enterprise, 
which  puts  the  CIO  in  an  excellent 
position  to  drive  value  in  other  areas.” 
Indeed,  CIOs  who  have  worked  hard 
to  prove  the  importance  of  IT  have 
made  that  case  so  well  that  their  bosses 
are  beginning  to  take  advantage  of 
their  expertise. 

“We  have  worked  hard  to  demystify 
IT  and  be  seen  as  integral  to  the  busi¬ 
ness.  We’ve  learned  to  think  and  act 
and  speak  ‘business  first,”’  says  Joe 
Drouin,  VP  and  CIO  of  TRW  Automo¬ 
tive,  who  recently  took  on  additional 
responsibility  for  global  logistics.  “This  is  all  being  recog¬ 
nized  by  senior  executives  who  say,  ‘This  person  is  more 
than  a  technologist.  He  or  she  knows  my  business  as  well 
as  anyone  else,  if  not  better.  What  else  could  I  have  him  or 
her  do  for  me?”’ 

The  phenomenon  is  familiar  to  A1  Etterman.  When  he  took 
a  job  at  software  company  OpenWave  in  2002,  he  recounts,  “I 
started  as  CIO,  but  I  picked  up  a  couple  of  other  pieces  along 
the  way.”  He  ended  up  in  charge  of  a  corporate  program  office, 


Expanding 
the  CIO  Role 

The  CIO  Executive  Council,  a  professional  association 
of  IT  leaders  founded  by  CIO's  publisher,  surveyed  58 
CIOs  who  have  additional  responsibilities  outside  of  IT. 
Here’s  what  they  said  about  their  extra-IT  roles,  how  they 
obtained  them  and  how  they  balance  their  time. 

ROLES  BEYOND,  BUT  RELATED  TO,  I.T. 

Most  common  additional  responsibilities: 

-  lii  ii Will 1  Wlh'i'i jlillMHWBMWMMMWMMl 

Information  security  69% 

Business  process  improvement  or  transformation  62% 
Corporate  website/online  identity  40% 
Innovation/change  management  38% 

Business  continuity  34% 

Respondents  chose  multiple  answers 


LOOKING  FOR  MORE  WORK 

CIOs  seek  non-IT  roles 


Sought  most 

or  all  additional 
responsibilities 

Sought  some 

additional 

responsibilities 


Didn’t  seek 

additional 

responsibilities 


ATTENTION  SHIFT 

Amount  of  time  spent  on  traditional  IT 


www.cio.com  |  MAY  1,  2008  29 


COVER  STORY 


CIO  Role 


In  the  early 
stages,  a  lot  of 
people  assumed 
I  wanted  to 

take  over  their 
department.  99 


-TOM  COLEMAN,  CIO  AND 
CHIEF  PROCESS  OFFICER, 
SLOAN  VALVE 


real  estate  and  facilities.  “I  kind  of 
forgot  to  duck,”  he  says,  half-joking. 

When  JDS  Uniphase  (JDSU),  a  Mil¬ 
pitas,  Calif.-based  manufacturer  of 
communications  test  and  measure¬ 
ment  solutions  and  optical  products, 
hired  Etterman  in  2004,  the  new 
job  encompassed  not  only  the  CIO 
role  but  also  the  position  of  SVP  of 
customer  advocacy.  He  added  chief 
administrative  officer  to  his  portfolio 
a  year  later. 

Most  of  the  time,  additional  titles 
are  bestowed  after  success  with  an 
IT  initiative.  “It  almost  happens 
through  osmosis.  That  initiative 
becomes  a  stepping-stone  to  a  big¬ 
ger  leadership  role,”  says  Gordon  of 
Harvey  Nash. 

When  Tom  Coleman  became  CIO 
of  plumbing  products  manufacturer 
Sloan  Valve  Company  in  2000,  he 
was  concerned  that  the  company 
wasn’t  getting  enough  out  of  its 
SAP  software.  “I  had  experience 
with  business  process  reengineering 
so  I  started  talking  to  my  boss,  the 
CEO,  about  the  fact  that  unless  the 
software  were  connected  to  business 
process  improvement,  the  system 
was  worthless,”  Coleman  recalls. 

Long  story  short,  business  process 
improvement  became  one  of  the 
top  corporate  initiatives.  Coleman 
became,  in  addition  to  CIO,  the  chief 
process  officer  (CPO). 

Other  times,  however,  an  expanded 
role  comes  straight  from  left  field. 

TRW’s  Drouin  had  discussed  the 
idea  of  added  responsibility  with 
his  boss.  “I  was  expecting  something 
that  might  be  more  intuitively  linked  to  IT,”  he  says.  Like  run¬ 
ning  TRW’s  continuous  improvement  organization  or  its  shared 
services  centers.  At  an  offsite  last  year,  Drouin  suggested  to  the 
COO  that  the  company  form  a  task  force  to  reduce  inventory, 
outlining  plans  for  the  team  and  even  offering  up  a  few  IT  people 
to  contribute.  To  Drouin’s  delight,  the  COO  loved  the  idea.  But  to 
his  surprise,  the  COO  asked  him  to  create  and  run  a  new  global 
logistics  organization.  The  focus  of  the  new  job:  Get  a  handle  on 
inventory  and  materials  management,  but  also  oversee  transpor¬ 
tation,  freight,  distribution,  warehousing  and  customs. 

It  was  pretty  far  afield  from  any  additional  role  Drouin  had 
pictured  himself  taking  on,  but  he  was  game.  For  one  thing,  “I 


don’t  think  I  could  have  comfortably  declined,”  says  Drouin. 
“My  boss  and  I  discussed  that  I  was  ready  for  a  new  challenge.” 
Besides,  says  Drouin,  the  add-on  role  opens  up  a  world  of  possi¬ 
bilities  careerwise.  “Having  this  additional,  non-IT  responsibil¬ 
ity  could  lead  my  career  in  a  different  direction  than  I  had  always 
assumed— into  a  more  general  management  or  operations-man- 
agement  leadership  role.  It  could  be  a  good  thing.” 

Ready  for  the  Extra  Responsibility? 

Or  Just  Willing? 

For  all  the  talk  about  the  unique  qualities  a  CIO  can  bring  to 
an  additional  enterprise  role,  IT  isn’t  the  only  function  that  can 
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offer  its  expertise  more  broadly.  Finance,  for  example,  has 
an  impact  on  every  part  of  the  business,  too.  Yet  it’s  rare 
to  see  the  CFO  tackling  anything  other  than  his  executive 
fiduciary  responsibilities. 

It  may  be  that  CIOs— still  viewed  by  some  as  the  ugly 
stepchildren  of  the  C  suite— remain  eager  to  prove  their 
worth  and  are  more  willing  to  take  on  additional  duties.  Says 
Harvey  Nash’s  Gordon:  “IT  leaders  see  [these  expanded 
roles]  as  a  way  to  be  seen  as  a  true  businessperson.” 

The  danger  is  that  the  CIO  could  end  up  taking  on  tasks 
that  no  one  else  wants  to  do.  “The  CIO  can  end  up  doing 
strategic  jobs  that  are  core  to  business  success  and  depen¬ 
dent  on  IT,  or  the  CIO  may  get  invited  to  do  onerous  tasks 
that  they  wouldn’t  want  to  put  on  their  resume,”  says  For¬ 
rester’s  Cameron.  When  asked  if  CIOs  who  take  on  extra 
roles  are  being  exploited,  JDSU’s  Etterman  is  matter-of-fact: 
“You  probably  are  being  taken  advantage  of.  ’’But  Etterman, 
who  describes  himself  as  a  “fixer,”  doesn’t 
mind  as  long  as  it’s  an  area  where  he  can 
add  something  to  the  role  and  take  some¬ 
thing  new  from  it  for  himself. 

If  CIOs  are  being  used  by  the  corpo¬ 
ration  when  being  tasked  with  non-IT 
roles,  it’s  certainly  with  their  consent. 

“It’s  in  my  interest  to  make  myself  valu¬ 
able  to  this  organization,”  says  Gibson 
of  Best  Western.  “I  saw  a  hole  in  the 
strategic  services  area  and  the  difficulty 
the  company  had  filling  it.  I  had  a  strong 
point  of  view  about  what  we  should  do 
with  strategy.  So  I  volunteered  to  take 
it  on.  I  can  make  a  difference  and  make 
myself  more  valuable.”  For  Gibson,  who  says  he  doesn’t 
make  decisions  on  a  “good  for  my  career/bad  for  my  career” 
basis,  the  added  roles  have  been  a  boon.  “Having  multiple 
roles  has  made  this  job  more  interesting  than  jobs  I’ve  had 
before.  It’s  been  good  for  me.”  But,  says  Cameron,  “most 
CIOs  do  consider  it  a  good  career  move,  because  most 
people  believe  that  the  bigger  the  sphere  of  influence,  the 
greater  the  success  of  the  individual.” 

CIOs  are  likely  to  view  being  tapped  for  additional 
responsibility  as  a  vote  of  confidence.  “In  this  case,  my  boss  saw 
an  opportunity  to  advance  the  organization  by  creating  a  new 
function,  and  he  had  the  confidence  in  me  to  lead  it  and  deliver 
results,”  says  TRW’s  Drouin.  “He  didn’t  have  to  make  either  of 
those  choices.”  Indeed,  these  additional  responsibilities  confirm 
how  far  CIOs  have  come.  “[These  roles]  validate  IT  as  being  a 
true  strategic  enabler  rather  than  a  support  function,”  says  Gor¬ 
don  of  Harvey  Nash. 

Still,  it’s  not  a  decision  to  be  made  flippantly.  (See  “Is  a  CIO- 
Plus  Role  for  You?”  Page  34.)  “If  someone  does  make  the  move 
[to  take  on  additional  business  roles]  and  it  doesn’t  work  out,  it 
can  be  bad  for  your  reputation,  “  says  Gordon. 


That  caused  Best  Western’s  Gibson  to  toss  and  turn  more 
than  a  few  nights  before  adding  a  third  responsibility.  “I  know 
a  couple  of  CIOs  who  have  evolved  into  COO  and  CEO  roles,  so  I 
guess  it  was  clear  to  me  that  it  was  possible  to  succeed  outside  of 
technology,”  says  Gibson.  But  he  had  never  worked  outside  of  IT. 
“I  probably  came  into  it  with  more  trepidation  than  anyone  else. 
Part  of  me  was  saying,  ‘OK,  this  is  really  different.  Why  do  you 
want  to  do  this?  Why  does  Best  Western  think  I  can  do  this?”’ 

CIOs  can— and  should— say  no  to  opportunities  that  don’t 
work  for  them.  For  one  thing,  CIOs  who  are  still  working  to 
improve  the  technology  group  will  only  hurt  themselves— and 
the  business— by  donning  another  business  hat,  says  Cameron. 
“If  a  CIO  has  expanded  responsibilities  but  doesn’t  manage  IT 
well,  that  CIO  is  less  likely  to  be  in  a  better  position  to  deliver 
improved  processes  and  business  results,”  adds  Cameron. 

A  “no”  needn’t  been  seen  as  a  negative.  “If  the  role  doesn’t 
have  the  right  sponsorship  in  the  company  or  does  not  add 


Having  more  of  a  business  portfolio  was 
attractive  because  it  seemed  more  chal¬ 
lenging.  I'm  establishing  business 
relationships  with  partners*  defin¬ 
ing  the  business  terms*  as  well  as 
delivering  the  technology  to  bring 
more  revenue. 

-SCOTT  GIBSON,  CIO  AND  SVP,  DISTRIBUTION  AND  STRATEGIC 
SERVICES,  BEST  WESTERN  INTERNATIONAL 


value  to  your  career,  why  take  it?”  says  Gordon,  who’s  seen 
CIOs  turn  down  additional  roles  they  didn’t  feel  were  strategic 
or  would  be  too  much  of  a  distraction  to  the  IT  role.  “If  I  wasn’t 
up  for  the  broader  responsibility,  I  would  have  had  to  say  no,” 
says  Gibson. 

The  Upside  of  Multiple  Roles 

For  Gibson,  excitement  ultimately  outweighed  apprehension. 
His  second  role  of  vice  president  of  distribution  put  him  in 
charge  of  a  revenue  stream.  “The  job  of  IT  person  gives  you  a  lot 
of  opportunity  to  wreck  revenue,  but  this  would  give  the  chance 
to  add  to  revenue,”  says  Gibson.  “Having  more  of  a  business  port¬ 
folio  was  more  attractive  because  it  seemed  more  challenging. 
I’m  establishing  business  relationships  with  partners,  defining 
the  business  terms,  as  well  as  delivering  the  technology  to  bring 
more  revenue.” 

The  unknowns  of  an  extra-IT  role  can  be  a  thrill.  “It’s  fun. 
It’s  interesting.  It’s  different  every  hour  of  the  day,”  says  JDSU’s 
Etterman.  “I  can  go  from  a  real  estate  negotiations  meeting  to  an 
Oracle  conversation  about  SOA  and  Web  2.0  to  compensation 
discussions  to  a  board  meeting.” 
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The  potential  benefits  to  the  CIO— and  the  company— can’t 
be  denied.  Dual-role  CIOs  stay  around  longer,  says  Forrester’s 
Cameron.  “There’s  a  much  more  obvious  connection  from  them 
to  the  business  because  they’re  more  instrumental  in  driving 
improvements  in  the  company.” 

Indeed,  CIOs  who  have  taken  on  additional  business  are  better 
positioned  to  deliver  improved  processes  and  business  results. 


-JOE  DROUIN,  VP  AND  CIO,  TRW  AUTOMOTIVE 

“I  am  both  the  customer  and  provider  of  a  solution.  There  are 
people  on  my  team  that  are  using  technology  to  generate  rev¬ 
enue,  and  there  are  people  on  my  team  who  are  delivering  tech¬ 
nology,”  says  Gibson.  “Conflict  [between  IT  and  the  business] 
has  not  gone  away,  but  it’s  isolated  at  my  level.” 

Best  Western  is  currently  rolling  out  ITIL  best  practices,  for 
example.  There’s  a  natural  tendency  within  the  business  to  want 
to  introduce  new  technology  features  and  functions  fast  and 
furiously,  without  much  consideration  of  what  that  can  do  to 
the  stability  of  the  IT  environment.  But  Gibson  has  been  able 
to  slow  things  down  and  introduce  ITIL-inspired  change-man¬ 
agement  processes  that  empower  the  technology  team  to  delay 
production  changes  if  they  represent  a  significant  risk  to  cur¬ 
rent  capabilities.  “Since,  in  some  cases,  I’m  both  the  senior  user 
and  the  leader  of  the  technology  team,  direct  reports  from  both 
sides  are  empowered  to  work  together,”  says  Gibson.  “We’re 
able  to  make  a  lot  more  headway  in  making  those  processes 
most  effective.” 

At  Sloan  Valve,  Coleman’s  triple-threat  role  as  CIO,  and,  since 
2004,  chief  process  officer  and  leader  of  corporate  strategic 
planning,  has  eliminated  a  lot  of  bureaucratic  back-and-forth 
between  departments.  “I  sit  down  once  a  month  with  functions 
to  talk  about  priorities,”  says  Coleman.  “Most  big  projects  are 
driven  by  the  strategic  plan.  There’s  nearly  complete  alignment, 
although  I  don’t  care  for  that  word.  There’s  clarity.” 

Be  Careful  What  You  Wish  For 

Coleman  spends  half  his  time  on  IT  issues,  half  on  process  man¬ 
agement  and  improvement,  “and  20  percent  of  my  time  on  strat¬ 
egy.  That’s  120  percent,”  he  says  with  a  hearty  chuckle. 

Time  management  is  critical  for  a 
CIO  who  takes  on  roles  beyond  IT.  And 
it’s  not  always  a  laughing  matter.  “The 
downside  is  that  it  might  kill  me,”  says 
Drouin.  He  underestimated  the  addi¬ 
tional  workload.  “And  I  don’t  even  feel 
like  I  am  fully  engaged  in  the  new  job  yet. 


I  am  certainly  not  doing  justice  to  my  new  team  at  this  point  in 
providing  leadership  and  direction.  I  am  out  of  my  comfort  zone. 
I  simply  don’t  have  the  same  breadth  or  depth  of  experience  with 
logistics  that  I  do  with  IT,  which  adds  to  the  stress  level.” 

Drouin  is  worried  that  as  he  gets  the  new  logistics  group  up 
and  running,  he  could  easily  let  his  CIO  self  slide.  From  conver¬ 
sations  with  peers  who  have  juggled  multiple  roles,  “it  seemed 
that  the  IT  role  kind  of  got  pushed  to  the 
back,”  Drouin  says.  “I  do  not  want  that  to 
happen  to  me.  I  love  the  CIO  role,  both  what 
it  is  now  and  what  it  is  becoming.  I  like  that 
the  CIO  role  is  becoming  very  business- 
process  focused.  CIOs  are  engaging  with 
their  peers  at  a  different  level,  looking  for 
solutions  to  business  problems  and  ways 
to  improve  business  process.” 

For  CIOs  taking  on  additional  roles,  delegation  is  paramount. 
“While  making  adjustments  to  be  seen  to  be  successful  in  a  new 
role,  you  definitely  have  to  burn  the  candle  at  both  ends  for  a 
while,”  says  Gordon  of  Harvey  Nash.  “But  generally,  this  is  an 
opportunity  to  develop  a  team  around  you.” 

Best  Western’s  Gibson  had  to  put  most  of  his  attention  on 
IT,  rather  than  on  distribution,  when  he  started  his  job.  Hav¬ 
ing  more  than  one  role  meant  Gibson  had  to  appoint  managers 
who  could  make  critical  IT  decisions,  as  well  as  establish  pro¬ 
cesses  that  did  not  require  his  daily  oversight.  Now,  he  relies  on 
his  direct  reports  to  deal  with  most  tactical,  and  even  strategic, 
challenges  without  him.  “You  have  to  have  a  predisposition  for 
empowering  your  direct  reports  and  giving  them  the  freedom 
to  deal  with  things,”  he  says. 

Overcoming  Resistance 

Most  CIOs  who  take  on  another  role  don’t  feel  diminished  by  it. 
But  for  members  of  their  staff,  it  can  take  time  to  adjust  to  the 
new  reality.  “It  was  confusing  for  my  team  initially,”  says  Gibson. 
“But  now  I  think  they  feel  like  they’re  coequal  members  of  my 
larger  team.  In  this  role,  I  can  do  a  better  job  of  having  the  busi¬ 
ness  make  clear  what  they  want  to  pursue  with  technology;  I  can 
actually  make  the  lives  of  IT  people  a  little  better.” 

Drouin  says  the  IT  group  at  TRW  has  been  supportive  of 
his  add-on  role.  “Generally,  they  have  seen  it  as  strong  sup¬ 
port  from  the  top  that  we  have  made  significant  progress  as  an 
organization.” 

Individuals  on  the  business  side  can  take  longer  to  come 
around.  When  Coleman  arrived  at  Sloan  Valve,  he  inherited 
an  IT  role  previously  filled  by  a  dictatorial  personality:  “That 

had  created  a  lot  of  resentment,  so  I  had 
to  be  careful  about  coming  across  as  all¬ 
knowing.”  When  he  decided  to  take  on 
additional  responsibili  ty  outside  of  IT,  he 
knew  he  had  to  tread  even  more  gingerly. 
“In  the  early  stages,  a  lot  of  people  won¬ 
dered  what  my  real  agenda  was.  They 


CIOs  are  engaging  with  their  peers  at  a 
different  level,  looking  for  solutions 

to  business  problems. 


More  About  Today's  CIO 


What’s  it  mean  to  be  a  strong  CIO?  Read  THE 

STATE  OF  THE  CIO  2008:  THE  CIO'S  TIME  TO 
SHINE  at  www.cio.com/article/163700. 
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Your  data  center  hardware 
requirements  are  growing  every  day. 

With  ZT  Systems,  you  get  validated,  high-quality  servers  featuring 
the  Quad-Core  Intel®  Xeon®  processor  5400  Series  for  maximum 
performance  and  efficiency  -  but  that’s  only  part  of  the  solution.  ZT 
Systems  now  offers  customizable  programs  designed  to  enable  the 
ultimate  in  value  and  ease  of  implementation  for  organizations 
operating  infrastructure-scale  data  centers. 


Leading  Edge  Technology  -  Innovative  solutions  from  ZT  Systems  address  the  critical 
challenges  faced  by  data  centers  today.  ZT  servers  feature  high  efficiency  power  supplies  for 
cost  savings  and  improved  thermal  performance,  and  our  innovative  twin  node  servers  enable 
an  unprecedented  combination  of  density  and  value,  with  two  discreet  server  motherboards  in 
a  1U  chassis. 

Custom  Hardware  and  integration  -  ZT  Systems  works  with  data  center  management  to 
determine  the  right  mix  of  technologies  and  platforms  for  your  environment.  We  set  up 
customized  stable  platform  programs  to  extend  product  lifecycles,  improve  consistency,  and 
drive  down  total  cost  of  ownership. 

Customized  Service  and  Support  -  ZT  Systems  extends  a  flexible  range  of  service  and 
support  offerings  designed  for  data  centers.  From  full  service  support  to  customized  options  for 
clients  with  internal  support  resources,  ZT  develops  specialized  programs  tailored  to  meet  your 
specific  requirements. 

Custom  Logistics  -  Custom  logistics  options  from  ZT  Systems  are  designed  to  increase  data 
center  procurement  efficiency.  From  custom  packaging  and  palletization  to  enhanced  RA 
procedures  and  extranets,  ZT  solutions  speed  server  implementation  and  reduce  internal  costs. 

Maximum  Cost  Effectiveness  -  ZT  is  committed  to  providing  value  added  price  leadership 
within  the  high-volume  server  segment  Our  operational  efficiencies  mean  cost  advantages  for 
you,  with  recent  comparisons  yielding  substantia!  savings  over  equivalent  configurations  from 
other  major  manufacturers. 


ZT  Systems  is  a  contributing  member 
of  The  Green  Grid,  a  consortium  of 
information  technology  companies 
and  professionals  seeking  to  lower 
the  overall  consumption  of  power  in 
data  centers  around  the  globe.  With 
server  solutions  designed  from  the 
ground  up  for  energy  efficiency,  ZT 
Systems  empowers  data  center 
management  to  optimize  density  and 
power  consumption  -  and  lower  cost 
of  ownership  and  operation. 


Contact  Us  Today  to  Learn  About  ZT  Server 
Solutions  and  Data  Center  Programs 
Customized  to  Fit  Your  Needs 
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(866)888-6669  Powerful. 

DataCenterSales@ZTSystems.com  Efficient. 
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Isa  CIO-Plus  Rolefor You? 

Six  questions  to  ask  before  you  agree  to  additional 
job  responsibilities 

CIOs  EAGER  TO  CHALLENGE  THEMSELVES  or  prove  their  worth  may  be 
quick  to  take  on  additional  responsibilities  outside  of  IT.  But  it  may  not  be 
best  for  you  or  your  company  if  it  means  IT  has  to  take  a  backseat.  Here 
are  some  questions  to  ask  your  boss— and  yourself— before  signing  on  for 
double  duty  in  a  CIO-plus  role. 

1]  Will  it  change  my  position  in  the  company?  Find  out  if  the  job 

comes  with  more  money,  or  with  access  to  the  board  of  directors  or  execu¬ 
tive  team.  If  the  additional  position  does  not  enhance  your  standing  within 
the  organization,  "it  may  be  an  indication  that  they’re  just  dumping  some¬ 
thing  in  your  lap,”  says  Bobby  Cameron,  vice  president  and  principal  ana¬ 
lyst  with  Forrester  Research. 

Michael  Hites,  an  associate  vice  president  of  administrative  IT  services 
with  the  University  of  Illinois,  adds  that  if  you  don’t  know  why  you’re  taking 
on  the  role— or  if  you  weren’t  involved  either  in  creating  the  position  or  get¬ 
ting  yourself  selected  for  it— you  probably  should  turn  it  down. 

2  ]  Do  I  want  to  move  out  of  IT  or  just  supplement  my  CIO  role? 

Hites,  in  his  previous  job  as  CIO  at  New  Mexico  State  University,  was  also  in 
charge  of  the  university’s  strategic  planning  process.  “I  already  had  experi¬ 
ence  working  with  people  throughout  the  entire  organization,  so  taking  on 
a  universitywide  planning  role  was  a  natural  extension.” 

3  ]  Are  my  objectives  clear?  Make  sure  you  understand  how  your 
success  in  the  new  role  will  be  measured.  You  and  key  stakeholders  should 
agree  about  what  you’re  expected  to  achieve,  says  Sam  Gordon,  CIO  prac¬ 
tice  director  with  Harvey  Nash  Executive  Search. 

4  ]  Is  my  IT  organization  functioning  well?  If  you’re  midway  through 
an  enterprise  software  implementation  that’s  teetering  on  the  brink  of 
disaster,  it’s  probably  not  a  good  time  to  add  something  to  your  plate.  Your 
IT  house  should  be  in  order,  advises  Joe  Drouin,  VP  and  CIO  for  TRW 
Automotive. 

5  ]  Do  I  need  to  be  the  smartest  guy  in  the  room?  In  a  non-IT  role,  a 
CIO  may  suddenly  find  he’s  got  a  lot  to  learn.  Not  being  the  expert  may  put 
you  on  the  defensive,  says  Drouin.  “You  need  to  have  the  confidence  neces¬ 
sary  to  cope  with  this.” 

6]  Am  I  happiest  as  the  IT  guy?  "If  you  bleed  IT  and  truly  love  the 
technology  side,  don't  take  another  role,”  says  Hites.  “Your  bias  will  be 
clear  and  it  will  keep  you  from  succeeding.”  -S.O. 


assumed  I  wanted  to  take  over  their 
department  or  become  the  next  presi¬ 
dent  of  the  company,”  Coleman  recalls. 

Coleman  made  it  clear  he  had  “zero 
interest”  in  running  the  show. 

“Clearly  there  can  be  resentment  if 
somebody  feels  they  have  been  passed 
over  for  a  role  and  the  CIO  does  not  have 
the  requisite  ‘business  credentials,”’  says 
Gordon.  “It  may  be  a  misunderstanding 
of  the  CIO  role  that  causes  people  to  be 
on  guard,  not  considering  IT  to  be  ‘part 
of  the  business.’”  Being  seen  by  those 
in  the  business  as  more  than  “just”  the 
CIO  takes  time.  When  Michael  Hites 
was  CIO  and  vice  president  of  planning 
and  IT  with  New  Mexico  State  Univer¬ 
sity,  “everyone  from  the  ‘past’  [would 
still  ask]  me  about  the  latest  BlackBerry 
or  how  to  fix  their  website,”  he  says. 

“It’s  my  responsibility  to  be  known  as 
‘the  strategic  planning  guy,’  not  theirs. 

My  actions  need  to  clearly  show  that.” 

Hites,  who  began  a  new  job  in  March 
with  the  much  larger  University  of 
Illinois  system  as  associate  vice  presi¬ 
dent  of  administrative  IT  services  for 
the  university  administration,  which 
includes  Urbana-Champaign,  Chicago, 

Springfield  and  Global  Campus,  says  his 
experience  outside  of  IT  helped  him  get 
the  job. 

A  CIO-Plus  Future? 

Gibson,  whose  CIO-plus  role  at  Best 
Western  marks  his  third  C-level  posi¬ 
tion,  started  out  the  way  most  CIOs  used 
to— as  a  programmer.  “But  the  longer  I 
worked  in  businesses,  the  further  and 
further  I  moved  away  from  the  nuts  and 
bolts  of  technology,”  he  says.  Gibson  sees 
his  position  as  head  of  IT,  distribution 
and  business  strategy  as  just  another 
advancement  in  his  evolution.  “It’s  a 
natural  progression,”  he  says.  “People 
who  find  themselves  in  the  business  of 
being  successful  CIOs  today  are  people 
who  would  be  successful  in  other  areas  of  the  business  outside 
of  technology.” 

Perhaps  the  majority  of  IT  leaders  fall  into  that  category.  But 
not  everyone’s  game  for  tackling  the  CIO  role  and  something 
else,  notes  Cameron.  The  increase  in  CIOs  doing  double  or  triple 
duty  in  the  business  does  have  some  in  the  IT  community  won¬ 


dering— or  worrying— about  what  this  means  for  the  standalone 
CIO  role. 

“I  do  actually  think  the  CIO  role  should  be  a  discrete  role,  one 
that  should  be  important  enough  to  warrant  a  dedicated,  senior 
executive  position  in  any  company,”  admits  Drouin  of  TRW  He 
says  the  CIO  role  at  TRW  is  big  enough  to  keep  one  person  busy. 
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“On  the  other  hand,  I  appreciate  the 
confidence  my  boss  had  in  giving  me  a 
role  that  is  really  core  to  our  operations. 
This  was  a  very  personal  decision, 
more  about  my  own  development  and 
readiness  to  take  on  an  additional  chal¬ 
lenge  than  it  was  about  my  boss  feeling 
a  need  to  expand  the  CIO  role.” 

The  CEO  of  Sloan  Valve  recently 
asked  CIO  and  CPO  Coleman  if  he 
wanted  to  drop  the  CIO  part  of  his  title 
altogether.  “My  CEO  would  tell  you, 
IT  is  becoming  the  process  manage¬ 
ment  department.  The  CIO  is  becom¬ 
ing  CPO,  period,”  says  Coleman.  But 
Coleman  plans  on  keeping  the  CIO 
moniker  for  now. 

JDSU’s  Etterman  ultimately  gave 
up  straddling  the  CAO  and  CIO  roles. 
Earlier  this  year  he  hired  someone 
to  take  over  his  IT  role  full-time.  “At 
a  certain  point,  you  look  around  and 
say,  this  is  really  stupid,”  says  Etter¬ 
man.  “The  CIO  role  is  big  enough. 
You  can  figure  out  how  to  do  a  couple 
more  things  well.  You  can’t  do  much 
more  without  compromising  the  value 
you’re  delivering  to  the  IT  organiza¬ 
tion.”  JDSU’s  CEO  and  board  mem¬ 
bers  reluctantly  agreed.  “There  just 
wasn’t  enough  of  me  to  go  around,” 
says  now  executive  vice  president  and 
CAO-only  Etterman. 

Forrester’s  Cameron,  for  one, 
doesn’t  think  the  CIO  title  is  endan¬ 
gered.  “The  CIO  title  sticks,”  he  says. 
“There  will  always  have  to  be  someone 
in  charge  of  technology.” 

At  Best  Western,  Gibson  plans  to 
keep  the  CIO  title— and  the  other  two. 
“There’s  no  danger  I  will  turn  them 
over  to  someone  else  anytime  soon,” 
he  says.  “On  the  other  hand,  I  don’t 
know  that  I’m  so  emotionally  invested 
that  I  would  be  reluctant  to  do  that  in 
the  future.  I  want  to  be  valuable  to  this 
organization  in  a  way  that  works  for 
this  organization.”  E3I3 


Senior  Editor  Stephanie  Overby  can  be 
reached  ats overby@cio.com.  To  comment 
on  this  article,  go  to  www.cio.com/article/ 
336813. 
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in  the  national 
interest  thrive  at  Lawrence  Livermore  National 
Laboratory  (LLNL).  We  are  a  premier  world  class 
research  and  development  institution  for  science 
technology  applied  to  national  security.  By 
encouraging  a  competition  of  ideas,  instilling 
respect  for  individual  contributions,  and 
embracing  a  diverse  and  motivated  work  force, 
we  make  breakthroughs  that  have  global  impact.  Make  history  by  being  a  vital  part 
of  our  future. 

LLNL  is  currently  seeking  a  Chief  Information  Officer  responsible  for  intellectual 
leadership  and  management  oversight  of  all  enterprise-wide  Information  Technology 
(IT)  activities.  The  CIO  drives  the  definition,  development,  and  execution  of  a  strategy 
to  enable  the  successful  delivery  of  the  science  and  technology  that  will  enhance 
the  competencies  needed  for  our  defining  national  security  mission.  As  a  member 
of  the  Director’s  senior  management  team,  the  CIO  has  a  leadership  role  and  will 
have  a  significant  impact  in  shaping  the  Laboratory. 

The  CIO’s  scope  includes  infrastructure  and  architecture,  enterprise  applications 
development,  networks,  cyber  security,  data  center  operations,  and  support  to  the 
infrastructure  requirements  for  the  programmatic  research.  The  CIO  will  oversee 
implementation  of  the  strategy  for  managing  and  delivering  high  functioning,  cost- 
efficient  IT  services  to  the  enterprise. 

The  successful  candidate  must  possess  an  advanced  degree  in  information 
systems,  technology  management,  mathematics,  engineering,  or  computer  science. 
IT  subject  matter  expertise  combined  with  demonstrated  leadership  experience  in 
a  scientific  or  technical  institution  is  required.  The  CIO  must  be  a  proven  strategic 
and  innovative  thinker  who  plans  for  and  makes  decisions  within  the  framework  of 
the  Institution’s  strategic  intent.  Knowledge  of  national  IT  standards,  specifically 
those  relating  to  cyber  security,  is  essential  to  this  role. 


LLNL  offers  a  challenging  environment  and  a  competitive  salary/benefits  package. 
To  view  and  apply  for  this  job,  go  to  https://jobs.llnl.gov  and  search  by  job 
#007709.  When  applying  and  prompted  please  mention  where  you  saw  this  ad. 
LLNL  is  operated  by  the  Lawrence  Livermore  National  Security,  LLC,  for  the  U.S. 
Department  of  Energy,  National  Nuclear  Security  Administration.  We  are  proud  to  be 
an  equal  opportunity  employer  with  a  commitment  to  workforce  diversity. 


m 


Lawrence  Livermore 
National  Laboratory 
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The  technology 
popularized  by 
Wikipedia  can  help 
companies  gather 
and  manage  their  own 
collective  knowledge. 
Here’s  how  to 
get  started. 


BY  MARGARET  LOCHER 

Tony  Pagliarulo,  VP  of  application  development  with  information  technol¬ 
ogy  vendor  EMC,  and  his  team  were  building  a  knowledge  management 
system  three  years  ago  and  needed  a  way  to  organize  in  one  place  all  of  the 
schedules,  code  and  other  details  of  the  project.  He  chose  a  wiki— a  software 
application  that  allows  groups  of  users  to  create,  edit  and  comment  on  online 
documents— so  that  each  team  member  could  contribute  and  access  up-to- 
date  information  on  the  project. 

Because  his  team  had  the  most  current  informa¬ 
tion,  they  were  able  to  make  better  decisions  and 
get  the  project  done  faster.  And  Pagliarulo  has  used 
wikis  to  manage  IT  projects  at  EMC  ever  since. 

Meanwhile,  EMC’s  use  of  wikis  has  expanded  to 
support  other  business  functions  and  purposes. 

“Wikis  are  now  used  broadly  throughout  EMC  to 
store  documents,  create  logs  and  encourage  discus- 
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sions,”  Pagliarulo  says.  “There  are  hundreds  of  communi¬ 
ties  used  for  project  management  and  team-building.” 

Diverse  organizations,  including  businesses,  schools 
and  government  agencies,  are  waking  up  to  the  benefits 
of  wikis— one  of  the  group  of  Web-based  applications 
designed  to  improve  information  sharing  and  collabora¬ 
tion  known  collectively  as  Web  2.0.  By  making  it  easier 
to  gather  and  share  information  as  well  as  record  discus¬ 
sions  about  a  subject,  wikis  (familiar  as  the  software  behind 
online  encyclopedia  Wikipedia)  can  help  people  improve 
their  processes  and  get  projects  done  faster.  Among  311 
CIOs  who  participated  in  CIO’s  2008  Consumer  Technol¬ 
ogy  survey  in  January,  30  percent  said  they  provide  wikis  as 
corporate  applications.  Almost  half  of  those  who  use  wikis 
said  they  employ  them  primarily  as  a  collaboration  tool, 
with  employee  communication  cited  as  the  second  most 
common  reason  for  supporting  wiki  software. 

There  are  more  positives  than  negatives  to  using  wikis. 
They  don’t  require  a  lot  of  personnel  to  support  them  and 
many  of  the  tools  are  free.  At  some  companies,  end  users 
run  their  own  wikis,  without  help  from  IT  (and  sometimes 
without  IT’s  knowledge— more  on  that  shortly).  But  for 
organizations  that  want  to  deploy  wikis  enterprisewide,  or 
where  it’s  important  that  end  users  follow  consistent  rules, 
IT  departments  must  be  prepared  not  only  to  choose  the 
right  software  and  support  it,  but  also  to  help  define  the 
purpose,  structure  and  scope  of  company  wikis. 

Here’s  how  to  get  started: 

Decide  Why  You  Want  a  Wiki 

Early  adopters  say  corporate  wikis  work  best  when  they’re 
focused  narrowly  on  a  specific  project  or  collection  of  infor¬ 
mation,  as  well  as  on  a  specific  group  of  users.  The  heated 
debate  within  the  Wikipedia  community  over  its  editorial 
policies  suggests  that,  at  the  very  least,  having  lots  and  lots 
of  contributors  begets  conflicts  over  wiki  management. 

“Wikis  are  very  good  for  a  departmental  project,”  says 
Pagliarulo.  “It  remains  to  be  seen  how  this  technology  will 
scale  for  active  collaboration  among  very  large  groups” 
and  across  multiple  locations.  It’s  possible,  therefore,  that 
if  you’re  a  multinational  company  you  might  end  up  with  a 
wiki  for  each  business  location  or  department  along  with  a 
global  one  to  serve  bigger-picture  conversations. 

Defining  the  scope  of  your  wikis  will  also  help  you  deter¬ 
mine  which  software  best  suits  your  needs.  WikiMatrix.org 
is  a  site  that  can  help  you  identify  which  software  is  right 
for  you  by  comparing  options  according  to  price,  security, 
support,  features  and  multimedia  options.  And  Wikipedia 
itself  has  a  page  that  compares  wiki  options. 

Later,  having  a  well-focused  wiki  can  help  you  get  people 
to  use  it.  Alexander  Milne,  senior  director  of  public  technol¬ 
ogy  at  the  Wharton  School  of  the  University  of  Pennsylvania, 
decided  he  needed  a  wiki  to  help  his  team  share  documents  in 


Ways  M 

toWiki 

Open  source  and  free,  or  hosted  for  a  fee, 
these  applications  are  among  many  wiki 
software  options 

BrainKeeper  Provides  knowledge  management  tools. 
Prices  based  on  the  number  of  log-ins  required. 

ClearWiki  A  hosted  wiki  that  enables  users  to  search 
within  common  file  types  like  PDFs. 

EditMe  Hosting  service  provides  custom  wikis  for  a 
monthly  fee  but  no  marketing  services. 

Paux  j  Free,  Java-based  open-source  software  that  is 
similar  to  a  content  management  system. 

MediaWiki  The  free  software  Wikipedia  uses  for  its  web¬ 
sites  boasts  lots  of  features  and  can  support  high  traffic. 

MoinMoin  Another  free  application.  Users  can  get  help 
from  MoinMoin  developers. 

Socialtext  j  Provides  "wiki  appliances,”  or  dedicated 
boxes,  for  deployment  at  customers’  sites  as  well  as  host¬ 
ing  wikis  in  the  company’s  data  center  for  a  few  dollars  per 
user  per  month.  Services  include  marketing  the  wiki  to 
users. 

StikiPad  Simple  enough  for  small-scale  purposes  but 
can  be  customized  for  big  projects.  Price  is  based  on 
storage  capacity,  with  an  entry-level  allocation  of  30MB 
available  for  free. 

Wetpaint  A  free  hosted  wiki  that’s  easy  to  learn  and  edit. 
Some  wiki  users  say  it’s  good  for  first-timers.  -M.L. 


a  central  repository  that  was  easy  to  access.  Wikis  appealed 
to  Milne  as  the  solution  because,  “You  just  need  a  browser 
and  you’re  ready  to  go.”  He  deployed  a  free,  open-source 
application  called  Moinmoin.  After  three  years,  Milne’s  wiki 
has  become  the  go-to  spot  for  most  IT  documents.  “I  have 
heard  on  more  than  one  occasion,  ‘Let  me  check  the  wiki’  or 
‘I  believe  that  was  documented  on  the  wiki,”  he  says. 

Choose  Your  Software 

The  software  used  by  Wikipedia  is  the  open-source  Media 
Wiki.  MediaWiki  and  many  other  wiki  applications  can  be 
downloaded  from  the  Web  and  run  by  an  IT  shop  behind 
the  corporate  firewall.  Other  free  applications,  such  as 
PBwiki  or  Wetpaint,  may  be  hosted.  These  free  applica¬ 
tions,  whether  hosted  or  not,  frequently  include  features 
like  video  integration,  customizable  templates,  and  version 
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control  that  allows  you  to  refer  back  to 
an  earlier  iteration  of  any  page. 

But  there  are  also  vendors,  like 
Socialtext,  Paux  and  Brainkeeper, 
that  provide  commercial  wiki  soft¬ 
ware  options  either  on  a  hosted  basis 
or  deployed  behind  a  company’s  fire¬ 
wall,  or  integrated  with  other  corpo¬ 
rate  systems. 

Each  approach  has  its  pros  and 
cons.  Not  only  must  you  make  trade¬ 
offs  between  cost,  functionality  and 
support,  you  also  have  to  determine 
whether  you  want  to  let  end  users 
download  and  manage  the  applica¬ 
tions  by  themselves.  What’s  more, 
employees  might  already  be  using 
homegrown  wikis;  you  have  to  decide 
whether  to  let  these  be  or  migrate 
them  to  a  corporate  platform. 

In  fact,  wikis  are  often  developed 
and  managed  by  teams  outside  of 
IT,  and  often  without  IT’s  support  or 
knowledge.  Jeff  Brainard,  director  of 
product  marketing  for  Socialtext,  observes  that  small  groups 
within  a  company  will  often  bypass  IT  and  start  with  wiki 
software  packaged  in  a  network- ready  appliance  or  hosted 
service.  If  a  group  of  employees  goes  the  free,  do-it-yourself 
route,  he  says,  they  can  create  and  maintain  their  wiki  for 
a  short-term  project,  without  needing  to  get  IT  involved. 


o  years  ago  the  mention 
of  the  word  ‘wiki’  earned  you 
funny  looks.  Now  it’s  more  of 
a  mainstream  tool.” 


-MICHELE  HOVET,  I.T.  DIRECTOR, 
CITY  OF  ARVADA,  COLO. 


Jessamyn  West,  a  library  technology  consultant  and  author 
of  the  Librarian.net  blog,  has  used  Wetpaint  and  other  soft¬ 
ware  for  various  wikis.  “It’s  empowering  to  see  what  you 
can  do  on  your  own.  Some  tools  are  often  so  user-friendly 
that,  if  you  can  use  Word,  you  can  use  them.” 

At  some  companies,  users  may  bring  in  IT  only  if  they 
decide  to  deploy  wikis  enterprisewide,  and  need  to  integrate 
the  wiki  application  with  the  larger  IT  infrastructure.  “We 
have  an  incredibly  savvy  group  here,”  says  Wharton’s  Milne. 
“If  they  feel  comfortable  with  the  technology,  we  say  go  for 
it.  If  a  number  of  faculty  converge  on  the  same  solution,  we 
will  support  that.” 


^  x  T  T*  "1  • 


That  Can  SinkYour  WlKl 

1.  An  unclear  purpose.  Jeff  Brainard,  director  of  product  marketing  with  wiki 
vendor  Socialtext,  finds  from  observing  his  company’s  customers  that  wikis 
fail  when  their  scope  isn’t  clearly  defined. 

2.  An  anything-goes  attitude.  You  want  to  encourage  users  to  contribute  and 
discuss  wiki  content,  but  someone  has  to  make  sure  it  stays  relevant.  Wiki 
administrators  must  keep  pages  and  entries  clean  and  orderly  or  the  wiki  won’t 
be  useful.  When  you  have  a  list  of  bookmarks  and  links,  "people  always  add, 
but  never  subtract,”  says  Jessamyn  West,  a  library  technology  consultant. 

“You  end  up  with  an  appallingly  large  list  and  unhappy  users.” 

3.  The  wrong  software.  It  may  be  tempting  to  download  free  software  and  build 
your  own  wikis.  But  before  you  do,  say  experienced  wiki  creators,  make  sure 
someone  has  the  time  to  maintain  the  pages.  Similarly,  don’t  jump  into  a  con¬ 
tract  to  have  a  vendor  host  your  wiki  if  you  can  effectively  manage  it  yourself. 

4.  Ignoring  feedback.  Usability  is  critical  to  wiki  success.  Experts  advise  that 

you  start  a  wiki  with  a  small  group  of  users,  and  that  you  pay  attention  to  what 
they  say  about  how  the  wiki  looks  and  functions.  -M.L. 


But  at  other  companies,  such  as  EMC,  employees  are  dis¬ 
couraged  from  using  any  platform  that  IT  doesn’t  endorse. 
“We  do  limit  use  of  non-IT-supported  wikis  for  security  and 
access  reasons,”  says  Pagliarulo. 

Despite  the  ease  of  using  most  wiki  software,  as  with 
other  applications,  there  are  some  benefits  to  letting  a  ven¬ 
dor  worry  about  the  back-end  aspects.  Socialtext,  for  exam¬ 
ple,  not  only  sets  up  and  monitors  wikis  for  its  customers,  it 
also  helps  brand  and  market  them  to  users.  The  company’s 
customers  take  different  approaches  to  wiki  management: 
Humana  uses  appliances  that  are  hosted  in  Socialtext’s  data 
center,  while  Symantec  has  deployed  the  product  behind 
its  firewall. 

Outline  the  Wiki’s  Structure  With  a  Small  Team 

Once  you  decide  to  deploy  wikis,  you’ll  need  to  set  up  rules 
for  using  them.  These  include  defining  to  what  extent  end 
users  will  be  able  to  edit  wiki  pages,  setting  standards  for 
how  administrators  will  respond  to  updates  from  users,  and 
setting  rules  around  uploading  text  files  or  videos. 

Two  years  ago,  Michele  Hovet,  IT  director  for  the  city  of 
Arvada,  Colo.,  assigned  a  team  of  five  to  develop  the  city’s 
first  wiki  using  Media  Wiki  software.  “We  wanted  a  place  to 
look  up  all  the  projects  that  were  happening  around  the  city 
and  to  view  information  and  updates,”  says  Hovet.  She  chose 
Media  Wiki  because  it  was  free  and  easy  to  set  up,  although 
she  plans  to  look  at  other  applications  for  future  projects. 
The  IT  team  used  the  wiki  to  share  project  management 
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SOA  Governance  and 
Architecture  Service 

A  service-oriented  architecture  can  change  and 
improve  the  dynamics  of  an  organization. 


Mark  LaJeunesse,  worldwide  program  manager, 

SOA,  CONSULTING  &  INTEGRATION 

MARK  IS  RESPONSIBLE  FOR  THE  DEVELOPMENT  OF  SOA  SERVICES,  SALES  AND 
DELIVERY  TRAINING  AND  FOR  DRIVING  HP'S  ENTERPRISE  APPLICATION  SERVIC¬ 
ES  PRACTICE'S  SOA  VISIBILITY  AND  DIFFERENTIATION  IN  THE  MARKET. 


SOA  is  often  viewed  as  a  technical 
challenge,  but  the  people  process  can 
be  a  greater  challenge.  Why? 

The  adoption  of  SOA  does  involve  some 
significant  technical  challenges— it  is  very 
important  to  deploy  the  right  technolo¬ 
gies  in  the  right  way— but  today,  these 
technology  challenges  are  reasonably 
well  understood.  On  the  other  hand, 
most  organizations  are  struggling  with 
issues  around  people  and  processes.  The 
successful  adoption  of  SOA  requires 
significant  changes  in  some  key  roles  and 
responsibilities  across  both  business  and 
IT  operations  including  different  ways 


of  working  and  thinking,  new  skills  and 
techniques,  and  new  organizational  struc¬ 
tures.  One  of  the  most  effective  approach¬ 
es  that  we've  found  for  addressing  these 
challenges  is  through  helping  to  establish 
an  SOA  Center  of  Excellence  (CoE). 

What  are  the  benefits  of  a  CoE  to 
SOA  transformation? 

There  are  multiple  benefits.  Few  organi¬ 
zations  have  the  level  of  SOA  expertise 
that  they’d  like  and  the  CoE  allows  you 
to  concentrate  the  resources  that  you  do 
have.  Our  CoE  approach  encourages  a 
standardized  approach.  Structure  and 
discipline  are  important  in  SOA  transfor¬ 


mation  and  a  CoE  enforces  standardized 
development  methods  as  well  as  opera¬ 
tional  procedures.  A  CoE  also  enables  an 
incremental  approach  to  SOA  adoption 
as  it  engages  with  each  SO  A  project  and 
affected  organization.  Cumulatively,  the 
CoE  accelerates  SOA  adoption. 

What  is  your  advice  to  CIOs  in 
approaching  SOA  governance? 

Establish  your  governance  early.  Get 
it  tested  and  established  concurrently 
with  the  rollout  of  your  SOA  pilot  and 
proof-of-concept.  It’s  critical  to  monitor 
your  design-time  and  run-time  gover¬ 


nance  in  conjunction  with  your  overall 
process  and  organizational  governance. 
Communication  is  also  critical.  You 
must  communicate  relentlessly  on  what 
you  are  doing,  and  why  you  are  doing  it. 
Don’t  re-invent  the  wheel:  some  aspects 
of  SOA  governance  are  common  to  every 
enterprise;  others  will  be  unique  to  your 
organization.  To  be  effective  you  must  put 
the  right  processes  and  controls  in  place. 

How  does  HP's  technology  help 
customers  to  realize  SOA  governance? 

In  addition  to  the  SOA  CoE  service  and 
all  it  has  to  offer,  the  HP  SOA  Systinet 
software  provides  a  foundation  for  auto¬ 


mation  of  governance  across  the  service 
lifecycle.  Gartner  recently  placed  us  in  the 
leader  quadrant  of  their  Magic  Quadrant 
for  Integrated  SOA  Governance  Technol¬ 
ogy  Sets.  I  would  suggest  to  anyone  work¬ 
ing  in  this  space  to  reference  that  report, 
and  the  HP  website,  to  better  understand 
our  strength  and  how  we  can  genuinely 
help  customers  in  SOA  governance. 

What  is  the  relationship  between  SOA 
quality  and  SOA  governance? 

Quality  is  an  important  element  of  the 
SOA  governance  process.  As  new  and  up¬ 
dated  services  roll  through  their  lifecycle, 
quality  gates  and  processes  should  be  in 
place  to  monitor  and  ensure  compliance 
with  quality  standards  and  service  level 
agreements.  This  is  the  only  way  that  you 
can  rapidly  and  confidently  respond  to 
business  needs  in  the  knowledge  that 
your  services  have  completed  thorough 
testing  and  will  deliver  value  as  expected. 


FOR  MORE  INFORMATION: 

Check  out  the  white  paper  "The  Eight 
Most  important  Best  Practices  in 
SOA  Governance"  at 
www.cio.com/whitepapers/hp-SOA. 
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A  Center  of  Excellence  enables  an  incremental 
approach  to  SOA  adoption  as  it  engages  with  each 
SOA  project  and  affected  organization. 
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information  and  documents.  Two  Web  developers  set  up 
the  wiki,  working  with  other  IT  staff  members  and  project 
managers  who  designed  the  wiki’s  framework,  populating 
it  with  a  list  of  topics  relevant  for  project  management. 

Pagliarulo  used  a  six-member  team  at  EMC  when  the 
IT  department  began  planning  its  first  project  manage¬ 
ment  wiki,  which  was  intended  for  a  development  team  of 
30  people.  Those  six  included  an  architect  and  a  systems 
administrator,  who  worked  with  the  others  to  evaluate  the 
server  environment  and  analyze  how  much  storage  space 
would  be  required  to  support  the  wiki’s  growth. 

If  you  think  your  wiki  has  an  audience  beyond  its  pri¬ 
mary  contributors,  get  their  input  too.  For  example,  if 
salespeople  are  creating  a  wiki,  it  would  be  valuable  for 
marketing  staff  to  be  able  to  see  it  so  they  are  aware  of  new 
projects  or  tools  the  sales  team  is  using. 

Most  wiki  tools  allow  developers  to  build  in  shortcuts 
for  end  users.  If  consistency  is  important  across  a  depart¬ 
ment  or  company,  wikis  that  offer  auto-generated  templates 
make  it  easy  for  users  to  create  and  edit  wiki  pages  while 
ensuring  that  all  the  pages  look  the  same,  says  West.  The 
template  can  have,  for  example,  a  standard  header.  “And  if 
you  want  to  make  a  change  to  all  the  pages,  you  just  change 
the  template  once,”  she  adds. 


At  some  companies,  users  may  bring 
in  IT  only  if  they  need  to  integrate  the 
wiki  application  with  the  larger  IT 
infrastructure.  “We  have  an  incredibly 
savvy  group  here.  If  they  feel  comfortable 
with  the  technology,  we  say  go  for  it. " 

-ALEXANDER  MILNE,  SENIOR  DIRECTOR  OF  PUBLIC 
TECHNOLOGY,  THE  WHARTON  SCHOOL 


Put  Someone  in  Charge 

Once  you  have  parameters  for  what  the  wiki  will  accom¬ 
plish,  and  how,  decide  who  will  be  responsible  for  maintain¬ 
ing  the  content.  At  least  at  first,  the  wiki  administrators  will 
be  one  or  two  people  among  the  end  users  and  developers 
who  set  it  up.  Socialtext’s  Brainard  calls  these  administra¬ 
tors  “gardeners”  because  they  help  the  wiki  grow,  weed  out 
outdated  material  and  help  new  users. 

Wiki  gardeners  should  keep  a  close  eye  on  how  the  wiki 
expands  to  ensure  it  stays  true  to  its 
original  purpose.  “Maintenance  is  crit¬ 
ical,”  says  library  technologist  West, 
who  has  created— and  describes  herself 
as  a  happy  end  user  of— many  wikis. 

“The  person  building  the  wiki  needs  an 
organizational  sense  of  how  to  present 


More  About  Wikis 


the  information  or  no  one  will  be  able  to  find  anything.” 

Because  a  wiki  is  not  meant  only  to  be  used  for  informa¬ 
tion  storage,  but  for  conversation  and  reference,  gardeners 
should  not  be  shy  about  pruning  to  keep  lists  and  entries 
from  becoming  unwieldy. 

Each  of  the  hundreds  of  wiki  communities  within  EMC 
has  an  administrator,  says  CIO  Pagliarulo.  “Each  commu¬ 
nity  has  policies,  processes  and  guidelines  for  how  it  should 
be  used.  An  administrator  ensures  the  data  is  clean  and  gets 
purged  at  appropriate  intervals.” 

Know  Your  End  Users 

In  the  city  of  Arvada,  Hovet’s  plans  for  a  “one-stop  shop¬ 
ping”  wiki  for  project  charters  and  guidelines  hit  a  snag 
when  the  wiki  was  opened  to  managers  and  project  manag¬ 
ers  across  the  whole  organization.  “We  wanted  everyone  to 
contribute  to  the  content  and  help  shape  our  best  practices,” 
says  Hovet,  “but  other  city  staffers  did  not  adapt  well.” 

Getting  people  to  learn  and  understand  a  new  technol¬ 
ogy  turned  out  to  be  harder  than  the  IT  staffers  anticipated, 
Hovet  says.  The  city  was  rolling  out  new  project  manage¬ 
ment  processes  at  the  same  time  as  it  launched  the  wiki.  A 
cross-section  of  city  project  managers  felt  all  that  newness 
“would  have  been  intimidating  for  staff,”  she  says.  “This  was 
two  years  ago  when  the  mention  of  the 
word  ‘wiki’  earned  you  funny  looks. 
Now  it’s  more  of  a  mainstream  tool.” 
Hovet’s  team  put  project  documents 
and  other  information  on  the  city 
intranet  instead.  But  Arvada’s  project 
management  team  still  uses  the  wiki. 

Once  you’ve  agreed  on  the  wiki’s  pur¬ 
pose  and  you’re  done  developing  it,  you 
need  to-get  people  to  use  it.  Among  ways 
to  get  the  word  out,  managers  can  men¬ 
tion  wikis  in  their  communications  with 
the  company,  whether  that’s  via  e-mail 
or  newsletter,  or  at  company  meetings.  Brainard  says  you  can 
even  use  the  wiki  to  publish  company  blog  content  for  employ¬ 
ees  to  read  as  a  way  to  increase  visibility  and  adoption. 

Hovet  didn’t  promote  Arvada’s  first  wiki  very  widely.  But 
she  now  has  plans  to  make  the  wiki  software  available  on  the 
city  intranet,  and  at  that  point,  she  intends  to  spread  the  word. 
“We  normally  do  a  lot  of  promotion  with  new  software,”  she 
says.  “I  hope  our  implementation  of  wiki  technology  on  the 
intranet  will  allow  all  employees  to  participate  in  conver¬ 
sations  about  topics  that  affect  their 
employment  with  the  city.”  BE] 
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Margaret  Locher  is  a  Massachusetts- 
based  freelance  writer.  To  comment  on 
this  article,  go  to  www.cio.com/article/ 
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Risk  Management 


Weak  access  controls  allegedly 
exploited  by  an  insider  cost  Societe 
Generale  $7.2  billion.  The  case  should 
prompt  you  to  reassess  how  you 
balance  IT  security  with  employee 
access  to  critical  systems. 


It’s  a  lethal  combination 


Reader  ROI 
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Jerome  Kerviel,  the  trader  accused  of  causing  massive  losses  at  French 
bank  Societe  Generale,  leaves  prison  in  Paris  on  March  18.  Kerviel’s  instant 
messages  are  among  potential  evidence  investigators  planned  to  review. 


warning  that  businesses  can  do  better 
to  manage  IT-related  risk. 

“Much  time  is  spent  on  protecting 
the  external  threat,”  says  J.R.  Reagan, 
managing  director  and  global  solution 
leader  for  risk,  compliance  and  secu¬ 
rity  at  BearingPoint.  “But  the  internal 
threat  can  be  even  larger  in  terms  of  risk 
to  the  company.”  In  the  case  of  Societe 
Generale,  not  only  were  IT  security 
controls  insufficient,  but  the  bank’s  staff 
did  not  fully  investigate  red  flags  that 
arose.  Recent  research  by  the  Ponemon 
Institute  concludes  that  “insider  threats 
represent  one  of  the  most  significant 
information  security  risks.”  In  a  sur¬ 
vey  of  700  IT  practitioners  published 
by  the  group  in  February,  78  percent 
said  they  believe  individuals  have  too 
much  access  to  information  that  isn’t 
pertinent  to  their  jobs,  while  59  per¬ 
cent  said  such  access  presents  business 
risks.  What’s  more,  IT  professionals  see 
a  disconnect  with  business  leaders:  74 
percent  said  senior  management  does 
not  view  governance  of  access  to  infor¬ 
mation  as  a  strategic  issue. 

Many  business  executives  don’t 
know  what  their  risks  are  and,  even 
if  they  do,  they  may  have  a  tough  time 
balancing  potential  losses  against 
potential  gains,  says  Scott  Crawford,  a 
security  expert  and  research  director 
at  Enterprise  Management  Associates. 
“There’s  always  this  delicate  balancing 
act  between  taking  advantage  of  oppor¬ 
tunities  and  doing  an  effective  job  of 
IT  risk  management,”  he  notes.  “This 
notion  of  business  risk  exposure  in  IT 
still  is  a  challenge  particularly  for  the 
CIO  but  for  the  business  as  a  whole.” 

The  Societe  Generale  case  offers  les¬ 
sons  for  IT  leaders  in  how  to  manage 
access-related  risks. 

EXPLOITING 

A  RISKY  BUSINESS 

One  of  Societe  Generale’s  primary 
business  lines  is  derivatives— financial 


instruments  that  allow  traders  to  make 
contracts  on  a  wide  range  of  assets  (such 
as  equities,  bonds  or  commodities)  and 
attempts  to  reduce  (or  hedge)  the  finan¬ 
cial  risk  for  one  party  in  the  deal.  Trad¬ 
ing  derivatives,  however,  necessitates 
some  aggressiveness  and  can  be  fraught 
with  risk.  (Think  of  the  infamous  story 
of  Nick  Leeson,  a  former  derivatives 
trader  whose  unauthorized  speculative 
trading  led  to  the  collapse  of  the  United 
Kingdom’s  Barings  Bank  in  1995.) 


The  French  bank  isn’t  the  only 
company  recently  to  suffer  from  risky 
behavior  by  employees.  Bear  Stearns, 
rocked  by  losses  from  its  investments 
in  subprime  mortgages,  was  acquired 
by  J.R  Morgan  Chase  for  $2  a  share  in 
March  when  clients  lost  confidence  that 
the  firm  could  pay  its  debts.  In  Febru¬ 
ary,  Credit  Suisse  reported  an  unex¬ 
pected  write-down  of  $2.8  billion  that 
CEO  Brady  Dougan  attributed  to  “mis- 
markings  and  pricing  errors  by  a  small 
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number  of  traders  in  certain  positions” 
in  the  company’s  structured  credit  busi¬ 
ness.  Kareem  Serageldin,  Credit  Suisse’s 
recently  appointed  global  head  of  col¬ 
lateralized  debt  obligations,  was  among 
employees  suspended  after  an  internal 
review  uncovered  the  errors. 

Dougan  told  analysts  looking  for  reas¬ 
surance  that  even  with  the  announce¬ 
ment,  “we  feel  we  have  actually  managed 
our  risk  fairly  well,”  but  that  the  com¬ 
pany  still  needed  to  “continue  to  focus  on 
improving  its  risk  management  practices 
and  procedures.” 

BearingPoint’s  Reagan  observes  that  in 
the  case  of  Societe  Generale,  “their  activi¬ 


ties  deal  with  high  volume,  high  velocity 
and  quick  tempo  trading  of  stock,”  and  it’s 
likely  business  leaders  “wouldn’t  put  up 
with”  security  measures  that  would  slow 
them  down.  For  example,  Societe  Generale 
employed  single-factor  authentication 
(using  one  method,  such  as  passwords, 
to  grant  access  to  its  systems)  rather  than 
stronger  dual-factor  authentication  (requir¬ 
ing  that  individuals  employ  two  methods  of 
identifying  themselves  to  gain  access). 

“The  security  team  needs  to  explain  the 
risk  exposure  and  the  possibility  of  losing 
billions  in  fraudulent  trades  if  security  is 
not  adequately  addressed,”  Reagan  says. 
“But  most  security  guys  aren’t  well  enough 


in  tune  with  the  business  to  be  able  to 
articulate  a  business  case  like  that.” 

That  disconnect  can  be  enormously 
destructive,  as  the  Societe  Generale  incident 
shows.  “The  Societe  Generale  case  brings 
to  the  fore  the  fact  that  business  risk  can 
be  directly  exposed  through  IT,”  Crawford 
says.  “Kerviel  allegedly  manipulated  the 
IT  controls  on  the  business  systems  based 
on  his  midoffice  experience  and  back-office 
[IT]  knowledge  and  expertise.” 

Between  Jan.  18  and  Jan.  20,  the  bank 
discovered  that  Kerviel  had  established 
trading  positions— bets  that  the  price  of 
securities  and  warrants  would  move  in 
a  particular  direction— that  were  worth 
more  than  the  bank  itself.  He  bet  wrongly, 
and  unwinding  those  positions  over  the 
following  three  days  cost  the  bank  about 
$7.2  billion  as  it  sold  the  stocks  into  a  fall¬ 
ing  market. 

As  an  arbitrage  trader,  Kerviel  should 
have  been  making  transactions  in  pairs, 
buying  and  selling  similar  assets  to  exploit 
the  minute  and  fleeting  differences  in  prices 
that  exist  in  markets.  Arbitrage  trading  is 
considered  less  glamorous  than  the  one¬ 
way  bets  he  secretly  made  from  time  to  time 
by  faking  one  half  of  a  pair  of  transactions. 

A  preliminary  internal  investigation  by 
Societe  Generale  noted  that  Kerviel  had 
previously  worked  in  the  bank’s  IT  depart¬ 
ment,  and  so  had  in-depth  knowledge  of  its 
systems  and  procedures.  Staff  mostly  fol¬ 
lowed  those  procedures,  the  investigating 
committee  found,  but  the  procedures  were 
not  in  themselves  sufficient  to  identify  the 
fraud  before  Jan.  18,  partly  because  of  the 
effort  Kerviel  made  to  avoid  detection,  and 
partly  because  staff  did  not  systematically 
conduct  in-depth  investigations  when 
warning  flags  were  raised. 

Among  the  tricks  Kerviel  used  to  hide 
his  activities,  the  bank’s  investigation 
highlighted  the  use  of  fake  e-mail  mes¬ 
sages  to  justify  missing  trades,  and  the 
borrowing  of  colleagues’  log-in  creden¬ 
tials  to  conduct  trades  in  their  name. 

Investigators  identified  at  least  seven 
occasions  on  which  Kerviel  faked  mes¬ 
sages  between  April  2007  and  Jan.  18, 
four  of  them  referencing  trades  that  never 


Tips  for  Managing  IT  Risks 

Understand  the  risk.  IT  creates  business  risk,  notes  Scott  Crawford,  a  secu¬ 
rity  expert  and  research  director  with  Enterprise  Management  Associates. 
Knowing  what  those  risks  are  is  the  first  step  in  managing  them.  The  increas¬ 
ingly  prevalent  insider  threat  should  be  addressed  through  access  control  and 
identity  management  systems. 

Treat  IT  risk  management  as  a  business  investment.  Aligning  IT  risks 
with  business  requirements  will  help  you  allocate  the  resources  you  need  to 
manage  those  risks,  Crawford  says. 

Reevaluate  risks  regularly.  Periodic  reevaluation  of  risks  and  controls 
should  be  part  of  any  business’s  IT  control  strategy,  not  just  when  a  problem 
occurs.  Nevertheless,  you  should  reevaluate  your  risk  management  strategies 
if  your  controls  fail,  as  they  apparently  did  at  Societe  Generale. 

Use  the  right  controls,  and  make  them  secure.  You  can  have  al  I  the  controls 
in  the  world,  but  if  they  can  be  easily  compromised  they  won’t  do  you  much 
good.  Likewise,  if  you  have  the  wrong  controls,  or  not  enough  of  them,  you’re 
equally  ill-equipped  to  manage  risk.  Implement  the  proper  controls  and  grant 
access  to  your  systems  to  only  the  right  people,  Crawford  advises.  Then  moni¬ 
tor  and  constantly  reevaluate  the  controls. 

Compliance  isn’t  the  same  as  security.  Securing  your  systems  and  data 
may  make  you  compliant,  but  being  compliant  doesn't  necessarily  make 
you  secure.  If  your  controls  satisfy  your  regulatory  requirements,  but  don’t 
mitigate  risk,  then  they  are  not  adequate. 

-Katherine  Walsh 
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“To  make  the  best  use  of  systems  with  advanced  access  controls, 
the  IT  department  must  have  a  thorough  understanding  of  how 
the  business  works  and  where  there  is  risk.  But  IT  departments 
and  business  managers  have  yet  to  find  a  way  to  wrap  security 
into  business  processes  so  it  is  not  an  impediment.” 

-IAN  WALDEN,  PROFESSOR  OF  INFORMATION  AND  COMMUNICATIONS  LAW, 

QUEEN  MARY,  UNIVERSITY  OF  LONDON 


existed.  The  deception  was  uncovered 
when  they  could  find  no  trace  of  Kerviel 
receiving  the  purported  messages  in  the 
bank’s  e-mail  archival  system,  Zantaz. 

Between  July  2006  and  September 
2007,  internal  control  systems  raised  24 
alerts  when  the  value  of  Kerviel’s  trades 
exceeded  authorized  limits,  the  General 
Inspection  department  reported.  At  the 
time,  the  bank’s  risk  monitoring  unit  put 
the  anomalies  down  to  recurrent  problems 
with  the  way  the  trading  software  recorded 
operations,  and  asked  Kerviel’s  superiors  to 
make  sure  he  didn’t  exceed  limits  again. 

The  special  committee  made  a  num¬ 
ber  of  recommendations,  including  the 
use  of  stronger,  biometric  authentication 
systems  to  prevent  traders  from  accessing 
one  another’s  accounts,  and  the  improve¬ 
ment  of  alert  procedures  so  warnings 
reach  the  appropriate  managers.  In  addi¬ 
tion,  it  suggests  the  tightening  of  trading 
controls,  which  do  not  cover  cancelled  or 
modified  transactions— two  of  the  tricks 
Kerviel  used  to  conceal  his  bets. 

Auditors  are  still  looking  for  suspect 
trades  to  make  sure  all  have  been  uncov¬ 
ered,  and  investigators  have  yet  to  review 
Kerviel’s  use  of  an  instant-messaging 
service  for  evidence  of  his  activities,  the 
special  committee  said.  It  will  present  a 
final  report  to  shareholders  at  the  annual 


More  Secure  Endpoints 


Are  you  vulnerable  to  insider  mayhem?  Read 

SECURING  THE  ENDPOINTS:  THE  10  MOST 
COMMON  INTERNAL  SECURITY  THREATS  at 
www.cio.com/article/120101. 

cio.com 


general  meeting  on  May  27. 

Meanwhile,  on  April  1,  at  a  conference 
sponsored  by  Morgan  Stanley,  Oudea  said 
the  bank  had  tightened  its  IT  security  and 
access  to  its  information  systems,  among 
other  measures  to  improve  its  operational 
controls. 

LESSONS  FOR  1 1. 

Perhaps  some  good  may  come  out  of 
Kerviel’s  apparent  fraud  and  Societe 
Generale’s  blindness  to  it:  The  incident 
may  spur  other  companies’  executives  to 
talk  about  risk  management  and  IT  con¬ 
trols  inside  their  businesses. 

Organizations  tend  to  think  of  access 
as  being  binary  in  nature:  You  get  access 
to  it  all,  or  you  don’t,  says  Ian  Walden, 
professor  of  information  and  communi¬ 
cations  law  at  Queen  Mary,  University  of 
London.  In  reality  there  are  many  more 
levels  of  access.  “In  modern,  complicated 
systems,  the  granularity  has  to  be  much 
more  sophisticated.” 

To  make  the  best  use  of  systems  with 
advanced  access  controls,  the  IT  depart¬ 
ment  must  have  a  thorough  understand¬ 
ing  of  how  the  business  works  and  where 
there  is  risk.  But  IT  departments  and 
business  managers  have  yet  to  find  a  way 
to  wrap  security  into  business  processes 
so  it  is  not  an  impediment,  Walden  says. 

In  the  Ponemon  Institute  study,  only 
30  percent  of  respondents  said  their  orga¬ 
nizations  make  sure  user  access  policies 
are  validated  and  checked.  Meanwhile, 
accountability  for  governing  access  to 
systems  is  diffuse.  Twenty-nine  percent 
of  respondents  said  business  units  were 


most  responsible,  followed  by  application 
owners,  corporate  IT,  human  resources, 
information  security  and  compliance 
organizations. 

EMA’s  Crawford  says  companies  can 
begin  to  get  a  better  handle  on  access  risks 
by  asking  some  basic  questions.  These 
include: 

■  What  kind  of  behavior  anomalies 
would  indicate  you  may  have  more  risk 
exposure  than  you  realized,  and  can  you 
detect  or  recognize  them? 

■  Do  high-level  or  high-risk  employ¬ 
ees  have  privileges  that  are  so  broad  that 
checks  and  balances  among  individuals’ 
duties  become  negated?  How  effective  are 
the  controls  assuring  that  such  segrega¬ 
tion  of  duties  could  be  enforced? 

■  Are  your  control  systems  or  risk 
indicators  subject  to  subversion?  Are 
there  ways  you  can  enforce  more  effec¬ 
tive  controls  and  still  be  able  to  capitalize 
on  new  business  opportunities? 

“Businesses  are  just  now  beginning 
to  awaken  to  the  controls  within  the  IT 
environment,”  Crawford  says.  “If  you’re 
betting  the  farm  and  strategy  on  the  IT 
controls,  it  behooves  the  organization  to 
ensure  that  those  controls  are  reasonably 
resistant  to  subversion.”  QE1 


Senior  Online  Editor  Thomas  Wailgum  can 
be  reached  at  twailgum@cio.com.  Peter 
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FULFILLING  THE  ROLE'S  NEW  MANDATE 


By  the  leaders  of  the  CIO  Executive  Council 


The  IT-Business 
Strategy  Connection 

Galderma  CIO  Sean  Burke  has  been  planting  the  seeds  of  IT  as  a  strategic 
resource  for  eight  years;  the  crop  is  about  to  bloom  in  a  single-instance  ERP 


very  mid-size  company  eventually  recognizes  that  it 

has  outgrown  the  ad  hoc,  local  processes  that  allowed  it  to  function 
from  the  start-up  stage.  Whether  a  company  stays  within  a  single 
country  or  expands  globally,  there  comes  a  point  when  each  func¬ 
tion  is  too  focused  on  location  and  not  enough  on  corporate  direction,  and  an 
IT  leader  with  a  central  guiding  strategy  becomes  necessary 

At  Galderma,  that  realization  came  eight  years 
ago,  when  the  dermatology  products  company, 
aware  that  it  had  a  problem  with  IT  management, 
brought  me  in  to  solve  it.  Galderma  is  a  relatively 
young  company  Formed  in  1981  as  a  joint  venture 
between  Nestle  and  L’Oreal,  Galderma  is  on  a  fast 
growth  path,  operating  in  more  than  30  different 
countries.  But  when  I  arrived,  the  only  corporate¬ 
wide  technology  system  we  had  was  e-mail.  There 
were  28  ERP  packages.  Virtually  every  location  had 
a  different  one,  and  that  made  it  nearly  impossible 
to  centrally  manage  data  and  use  it  effectively. 

My  primary  role  has  been  to  develop  a  central  IT 
strategy  and  bring  some  coherence  to  the  mess.  It’s 
taken  me  until  now  to  change  the  company  culture 
to  one  that  values  technology  and  information  as 
strategic  assets.  The  knowledge  of  how  to  do  that— 


my  strategic  orientation— wasn’t  something  that  I 
came  into  through  chance. 

Origins  of  an  Outlook 

I  started  in  IT  20  years  ago  as  a  systems  support 
controller  at  what  was  then  E.R.  Squibb  &  Sons  (it 
became  Bristol-Myers  Squibb  after  merging  with 
Bristol-Myers  in  1989).  I  was  lucky  enough  to  work 
with  general  managers  who  valued  IT  and  informa¬ 
tion  asset  management,  and  who  could  see  their 
long-term  strategic  value.  My  conversations  with 
them  about  my  role  and  the  role  of  IT  in  business 
initiatives  helped  to  instill  in  me  an  understanding 
of  business  strategy  and  the  key  levers  for  IT. 

My  view  of  my  role  and  that  of  technology  really 
changed  when  I  became  involved  in  a  project  to 
develop  customer  relationship  systems  for  the 
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NEWSLETTER 

THE  EMPLOYEE  SECURITY  AWARENESS  NEWSLETTER  FROM  THE  EDITORS  AT  CSO 


Security  Smart  is  a  quarterly  security  awareness  newsletter  ready 
for  distribution  to  your  employees — saving  you  precious  time  on 
employee  education!  The  compelling  content  combines  personal 
and  organization  safety  tips  so  is  applicable  to  many  facets 
of  employees'  lives.  And  the  easy  to  read  design  has  multiple 
entry  points  so  you  are  assured  that  your  intended  audience  of 
employees — your  organization's  most  valuable  assets — will  read 
and  retain  the  information. 


Subscribe  today! 

To  view  a  sample  issue  of  the  newsletter,  learn  about  the 
delivery  options  and  to  subscribe  visit: 

www.SecuritySmartNewsletter.com 


For  more  information  please  visit 

www.SecuritySmartNewsletter.com 


Security  Smart  is  published  by  CSO,  a  business  unit  of  CX0  Media.  ©  2007  CX0  Media  Inc. 
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TALKING 


BUILDS  WALLS. 


BUILDS  THE  BUSINESS. 


More  and  more  CIOs  are  moving  beyond  just  talking  about  bringing 
business  and  IT  together,  to  actually  doing  it.  Which,  ironically,  gives 
them  something  quite  interesting  to  talk  about.  A  13%  net  profit  margin. 
To  see  how  they  did  it,  download  The  Global  CIO  Leadership  Study 


at  ibm. com/do/fusion  STOP  TALKING  START  DOING 
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Hi  The  Strategic  CIO  FULFILLING  THE  ROLE'S  NEW  MANDATE 


People  have  to  see  how  an  IT  project 
affects  the  bottom  line,  so  that  they 
fully  grasp  how  the  IT  strategy  plays 
into  the  health  of  the  business. 


whole  company.  I  had  become  associate  director 
for  sales,  marketing  and  medical  systems,  and  I 
was  working  closely  with  our  global  director  of 
sales-force  effectiveness.  I  had  the  opportunity  to 
think  about  how  IT  could  make  a  strategic  differ¬ 
ence  to  the  company— from  sales  all  the  way  to 
the  management  decision-making  process. 

We  tend  to  look  at  sales-force  activity  as  the  primary  tool 
for  measuring  our  investment  with  the  customer,  and  sales  or 
sales  audits  as  the  key  measure  of  return.  However,  the  rela¬ 
tionship  between  a  company  and  its  customers  is  far  more 
complex  than  that;  we  use  multiple  tools  to  change  purchas¬ 
ing  habits  and  measure  success. 

The  problem  has  always  been  to  collect  this  data  from  all 
the  silos  around  a  company,  to  consolidate  it  and  then  present 
it  in  a  meaningful  or  usable  way.  The  hurdles  are  not  just 
technical  but  also  political.  Persuading  each  country  man¬ 
ager  that  there  was  value  in  consolidating  shampoo  sales 
data  with  infant  nutritional  sales  data  was  a  challenge. 

That  experience  changed  my  focus  from  being  operational 
or  tactical— where  I  was  thinking  only  about  the  next  project 
and  the  delivery  of  services— to  a  strategic  role,  where  I  was 
looking  at  the  value  of  data  in  the  customer  relationship  and 
the  value  of  the  information  asset  to  the  enterprise. 

Painting  the  Strategic  Picture 

When  I  joined  Galderma,  we  were  still  a  young  company 
run  more  as  a  commonwealth  than  as  a  corporation.  Finan¬ 
cial  consolidation  was  a 
black  art,  with  informa¬ 
tion  flowing  from  local 
systems  to  the  corpo¬ 
rate  center  at  the  end  of 
each  reporting  period. 
We  had  to  change  how 
data  was  managed  in  a  way  that  both  satisfied  our  strategic 
need  for  consistency  and  respected  the  decentralized  cul¬ 
ture  of  the  company.  I  knew  from  what  I  had  learned  during 
my  years  at  Bristol-Myers  that  we  needed  to  avoid  doing  too 
much  too  quickly. 

We  needed  a  massive  ERP  replacement,  but  we  couldn’t 
invest  in  such  a  project  without  approval  from  the  business 
leaders  who  owned  the  country-specific  systems.  Getting 
that  approval  became  the  initial  thrust  of  the  IT  strategy. 

I  could  tell  Galderma’s  employees  that  a  single  system 
is  important  to  the  business,  but  it  took  years  to  get  people 
throughout  the  company  to  understand  why.  I  had  to  show 
them  the  value  of  a  single  ERP  system  and  get  them  to  want 
to  fund  such  a  project.  Therefore,  we  did  not  start  with 
the  single  ERP  solution;  rather  we  focused  on  construct¬ 
ing  what  would  be  the  foundation  of  our  future  application 


architecture  at  the  corporate  center. 

The  message  I  focused  on  in  the  meantime  was  that  data 
is  an  asset  that  must  be  managed  properly;  otherwise,  it 
becomes  a  millstone  rather  than  something  of  value.  I  had 
to  make  it  clear  to  people  in  the  business  units  that  when  you 
have  unmanaged  data,  everyone  has  to  spend  all  their  time 
translating  and  managing  it.  And  when  you’re  spending  all 
your  time  trying  to  figure  out  where  your  data  is  and  how 
data  from  other  departments  relates  to  yours,  there  isn’t  time 
to  use  it  to  deliver  shareholder  value. 

When  people  know  how  a  project  affects  their  corner  of 
the  company,  they  develop  a  personal  stake.  But  they  also 
have  to  see  how  an  IT  project  affects  the  bottom  line,  so  that 
they  fully  grasp  how  the  IT  strategy  plays  into  the  health  of 
the  business.  In  the  case  of  our  ERP  revamp,  the  message  was 
not  just  about  having  something  as  amorphous  as  “better 
technology”;  it  was  about  the  central  leaders  having  transpar¬ 
ency  of  information  across  units,  enabling  them  to  be  flexible 
in  using  resources  across  the  enterprise. 

When  our  new  CEO  and  CFO  were  appointed  in  2004 
they  emphasized  this  message.  They  wanted  and  needed  to 
have  accurate,  consistent  and  timely  information,  and  they 
pushed  that  vision  throughout  the  company.  Now  the  time 
has  come  for  the  second  phase,  when  we  harmonize  our 
ERPs  and  finally  have  a  common  data  language. 

NoTurningBack 

Once  you’ve  started  to  execute  a  strategic  vision,  you  cannot 
become  complacent.  You  have  to  keep  pushing  for  strate¬ 
gic  value  from  your  IT  investments,  even  when  you  think 
that  a  tactical  opportunity  seems  preferable.  Sometimes  you 
will  disagree  with  business  leaders  about  such  decisions  as 
balancing  the  roles  of  business  and  IT  personnel  within  a 
project,  and  you  have  to  compromise  to  get  the  job  done. 

Instilling  a  strategic  view  of  IT  at  Galderma  is  a  work  in 
progress.  The  money  for  a  single  ERP  finally  became  avail¬ 
able,  and  we  kicked  off  the  project  in  January.  That  this  proj¬ 
ect  is  going  forward  is,  for  me,  the  final  tick  in  the  box  to  say 
that  our  strategy  is  right,  and  that  people  understand  the 
value  of  data,  the  value  of  consistent  information,  and  how 
the  IT  strategy  enables  a  business  vision.  QI3 


Sean  Burke  is  CIO  at  Galderma  International  and  a  member  of 
the  CIO  Executive  Council.  To  comment  on  this  article,  go  to 
www.cio.com/207400. 


More  Strategic  CIO  Advice 


See  10  CIOs  discuss  leadership  in  the 

CIO  EXECUTIVE  COUNCIL  OUTLOOK 
video  series  at  www.cio.com/video/ 
outlookseries  CIO.COITI 
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Will  They  Follow? 

Pathways.  Turning  today’s  IT  professionals  into  tomorrow’s  business  leaders. 

You’ve  set  the  pace.  But  is  your  team  prepared  to  keep  up  with  the  momentous  challenges  they  will  face 
as  ourfuture  CIOs  and  business  leaders? 

Designed  by  CIOs,  Pathways  is  a  comprehensive  program  for  succession  planning  and  staff  development. 
Pathways  begins  with  a  robust  executive  competencies  assessment  to  identify  individual  strengths  and 
opportunities  for  growth.  Driven  by  these  results,  members  pursue  three  distinct  areas  of  development: 

•  Business:  Veteran  CIOs  mentor  intimate  groups  of  participants  on  the  corporate  politics 
and  pressures  of  the  executive  level. 

•  Leadership:  Twice-monthly  web  seminars  address  specific  executive  core  competencies. 

•  Technology:  Online  global  communities  provide  peer-to-peer  management  insights  in 
key  technology  functions. 

Help  tomorrow’s  leaders  gain  more  of  the  insight  and  knowledge  they  need  to  build  toward  the  next  big 
step  in  their  careers.  Visit  www.cioexecutivecouncil.com/pw01  to  learn  more  about  Pathways  and 
to  enroll  your  team  today. 


Pathways  enrollment  includes  complimentary  attendance  at  the  CIO  Leadership  Event  (a  $1,495  value) 

May  18-20,  Boston,  MA,  2008 


Pathways 

Advancing  Business,  Technology  &  Leadership  Excellence 


Powered  by 

rsi7|l  CIO  Executive  Council 

LMW  Leaders  Shaping  the  Future  of  Business 


The  Pathways  program  is  offered  by  the  CIO  Executive  Council,  a  member-led  executive  organization,  consisting  of  current 
and  future  business  leaders  working  to  impact  the  intersection  of  business,  technology  and  strategy.  The  CIO  Executive  Council’s 
mission  is  to  foster  measurable  value  for  all  members  by  enabling  them— through  peer  reliance  and  outreach— to  apply  the 
knowledge,  insights  and  best  practices  of  their  peers  to  the  success  of  their  enterprise  and  personal  achievement.  To  learn  more 
about  the  CIO  Executive  Council,  visit  www.cioexecutivecouncil.com. 
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The  greatest  test  of  leadership 
comes  in  times  of  profound  change.  For 
the  IT  professional  and  your  role  in  the 
enterprise,  the  next  few  years  will  bring 
unprecedented  opportunities  in  business, 
technology  and  staffing,  putting  you  once 
more  in  the  crucible  of  change.  Attend  the 
CIO  Leadership  Event  and  walk  away  with 
the  tools  needed  to  tackle  these 
opportunities  head  on. 

Don’t  miss  the  special  opening  keynote, 

Ken  Burns  and  the  American  Experience. 
One  of  the  most  recognizable  and  popular 
documentary  filmmakers,  Ken  Burns 
chronicles  those  aspects  of  US  history 
that  make  us  uniquely  American.  Meet  Ken 
Burns  after  his  presentation  and  receive  an 
autographed  copy  of  his  book,  The  War,  the 
inspiration  for  the  PBS  documentary. 
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Reasons  to  Stay  Home 

i$13.9  billion] 


Savings  in  commuting  costs  if  79%  of  U.S.  government  employees  eligible  to  telecommute 
full-time  actually  did.  They  would  also  spare  the  environment  21.5  billion  pounds  of  pollutants. 


Telework  Exchange  and  Tandberg  Federal 


THE  WORLD, 
GETTING  WIRED... 

Proportion  of  worldwide  Internet 
users  from  the  United  States 

1996: 66% 
Today:  21% 

ComScore 


...AND  GOING  WIRELESS 

[$15  billion] 

Revenue  from  in-building 
wireless  systems  by  2013 


ABI  Research 


Watch  That  Buzzword 

44%  OF  END  USERS  SAY  ENTERPRISE  2.0  IS  IMPORTANT. 
74%  ADMIT  THEY  DON'T  KNOW  ANYTHING  ABOUT  IT. 


AIIM  Market  Intelligence  Group 


OOPS! 

More  than 

70% 

of  all  data  leaks 
are  accidental. 

Forrester  Research 


GADGET  CRAZY 

$3.2  TRILLION 

Estimated  global  market 
for  electronics  products  in  2012. 

BCC  Research 


JOBS  NOW,  JOBS  LATER 

72%  of  CIOs  need  network  administrators  now. 


Robert  Half 


The  number  of  computer  scientists  and  database  administrators  is 
expected  to  grow  37%  by  2016,  compared  with  2006. 


U.S.  Department  of  Labor 


Promote  project  management  credentials  and  a  formal  career  path. 

Project  Management  Institute  helps  you  build  strong  teams  and  best  business  practices 
by  certifying  the  experience  and  knowledge  of  your  workforce.  And  our  formal  career 
path  helps  you  retain  and  promote  your  brightest  stars.  A  recognized  way  from  the  world’s 
leading  project  management  resource  to  increase  productivity,  efficiency  and  profitability. 

Accelerate  your  business  results  with  project  management.  Visit  us  at  PMI.org/advantage. 


Project  Management  Institute 


Making  project  management  indispensable  for  business  results.® 


CAPM®  Certified  Associate  in  Project  Management  ■  PMP®  Project  Management  Professional  ■  PgMPsm  Program  Management  Professional  ■  Career  Framework 
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IT  drives  your  business.  So  naturally,  it  consumes  your  thoughts.  Customers,  on  the  other  hand,  shouldn't  need  to 
think  about  it  at  all.  They  just  expect  great  service.  Our  approach  to  Business  Service  Management  helps  ensure  they 
get  it,  by  managing  IT  services  based  on  their  impact  to  your  business.  That  way,  with  your  service  commitments 
fully  in  sync  with  your  business  demands,  you'll  be  able  to  give  your  customers  that  most  coveted  and  elusive  of 
all  service  experiences:  complete  satisfaction.  Of  course,  we'll  know  the  source  of  that  satisfaction  is  really  your 
very  own  IT  department.  To  learn  more,  read  the  Forrester  analyst  independent  report,  "The  Key  To  IT  Business 
Alignment  Is  In  Operations  (April  2007)"  at  ca.com/bsm. 


GOVERN  •  MANAGE  •  SECURE 


Transforming 
IT  Management 


